CWE · MITRE source
CWE-790Improper Filtering of Special Elements
The product receives data from an upstream component, but does not filter or incorrectly filters special elements before sending it to a downstream component.
Last updated: 14 October 2026 20:41 UTC
NIST 800-53 r5 controls PROPOSED for this weakness (0)AI-assisted
These are model PROPOSALS, not graded mappings. They come
from controls_to_cwe_proposals, which carries no grade field at
all; across the CWE pages 1,540 of 1,722 such associations (89%) have never
been graded by anything. The heading said “address” until
2026-09-29, which asserted a relationship the data does not carry.
Graded cross-walks are on the framework map, not here.
| Control | Title | Family | Why it addresses this CWE |
|---|---|---|---|
| No NIST controls proposed yet. | |||
Top CVEs of this weakness type, ranked by Risk Priority
| CVE | Risk | CVSS | EPSS | Published |
|---|---|---|---|---|
CVE-2023-45239 UPD | 7.7 | 9.8 | 0.0224 | 2023-10-06 |
CVE-2023-22578 UPD | 7.5 | 10.0 | 0.0083 | 2023-02-16 |
CVE-2021-43802 UPD | 7.3 | 9.9 | 0.0206 | 2021-12-09 |
CVE-2024-31616 UPD | 6.7 | 8.8 | 0.0083 | 2024-04-23 |
CVE-2024-42416 UPD | 6.2 | 8.8 | 0.0040 | 2024-09-05 |
CVE-2026-2328 | 5.8 | 7.5 | 0.0031 | 2026-03-30 |
CVE-2026-11331 | 5.8 | 7.5 | 0.0043 | 2026-07-22 |
CVE-2025-27260 | 5.7 | 7.5 | 0.0021 | 2026-03-25 |
CVE-2026-9658 UPD | 5.7 | 7.3 | 0.0034 | 2026-05-28 |
CVE-2025-15576 UPD | 5.1 | 7.5 | 0.0011 | 2026-03-09 |
CVE-2024-6540 UPD | 4.6 | 5.7 | 0.0039 | 2024-07-15 |
CVE-2025-0431 UPD | 4.5 | 5.8 | 0.0042 | 2025-03-19 |
CVE-2024-43442 UPD | 4.0 | 4.9 | 0.0040 | 2024-08-26 |
CVE-2024-43443 UPD | 3.9 | 4.9 | 0.0036 | 2024-08-26 |
CVE-2024-47984 UPD | 3.7 | 4.4 | 0.0047 | 2024-12-13 |