Home/CWEs/CWE info/

CWE-176 - Improper Handling of Unicode Encoding

Abstraction:
Variant

Structure:
Simple

Status:
Draft

Weakness Name: Improper Handling of Unicode Encoding

Description: The product does not properly handle when an input contains Unicode encoding.

Common Consequences: Scope: Integrity
Impact: Unexpected State

Related Weaknesses: CWE-172Encoding Error

Release Date:
2006-07-19

Latest Modification Date:
2024-02-29

Top Security News

Microsoft confirms it's killing off Skype in May, after 14 years

Data Leak Exposes TopSec's Role in China's Censorship-as-a-Service Operations

U.S. recovers $31 million stolen in 2021 Uranium Finance hack

EncryptHub breaches 618 orgs to deploy infostealers, ransomware

MITRE Caldera RCE vulnerability with public PoC fixed, patch ASAP! (CVE-2025–27364)

Mozilla Updates Firefox Terms Again After Backlash Over Broad Data License Language

Vo1d Botnet's Peak Surpasses 1.59M Infected Android TVs, Spanning 226 Countries

Siemens Teamcenter vulnerability could allow account takeover (CVE-2025-23363)

Common Alerts

LowInsufficient Site Isolation Against Spectre Vulnerability

MediumSpring Actuator Information Leak

LowCSP: X-WebKit-CSP

InformationalGraphQL Endpoint Supports Introspection

InformationalCookie Poisoning

LowCookie with SameSite Attribute None

MediumMissing Anti-clickjacking Header

LowX-Debug-Token Information Leak

HighExternal Redirect

HighPath Traversal

Latest CVE List

CVE-2023-20118 Cisco Small Business RV Series Routers Command Injection Vulnerability

CVE-2022-43939 Hitachi Vantara Pentaho BA Server Authorization Bypass Vulnerability

CVE-2022-43769 Hitachi Vantara Pentaho BA Server Special Element Injection Vulnerability

CVE-2018-8639 Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability

CVE-2024-4885 Progress WhatsUp Gold Path Traversal Vulnerability

CVE-2024-49035 Microsoft Partner Center Improper Access Control Vulnerability

CVE-2023-34192 Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability

CVE-2017-3066 Adobe ColdFusion Deserialization Vulnerability

CVE-2024-20953 Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability

CVE-2025-24989 Microsoft Power Pages Improper Access Control Vulnerability

Common CWEs

CWE-672 Operation on a Resource after Expiration or Release

CWE-773 Missing Reference to Active File Descriptor or Handle

CWE-790 Improper Filtering of Special Elements

MediumCWE-375 Returning a Mutable Object to an Untrusted Caller

HighCWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

CWE-420 Unprotected Alternate Channel

CWE-1243 Sensitive Non-Volatile Information Not Protected During Debug

CWE-576 EJB Bad Practices: Use of Java I/O

CWE-914 Improper Control of Dynamically-Identified Variables

CWE-1247 Improper Protection Against Voltage and Clock Glitches

Free online web security scanner

Don't show website scan report rating on the leaderboard

CWE-176 - Improper Handling of Unicode Encoding

The product does not properly handle when an input contains Unicode encoding.