CWE-176 - Improper Handling of Unicode Encoding

Home/CWEs/CWE info/

CWE-176

Abstraction:
Variant

Structure:
Simple

Status:
Draft

Weakness Name: Improper Handling of Unicode Encoding

Description: The product does not properly handle when an input contains Unicode encoding.

Common Consequences: Scope: Integrity
Impact: Unexpected State

Related Weaknesses: CWE-172Encoding Error

Release Date:
2006-07-19

Latest Modification Date:
2024-02-29

Latest Security News

Five lesser known Task Manager features in Windows 11

Ruijie Networks' Cloud Platform Flaws Could Expose 50,000 Devices to Remote Attacks

Critical SQL Injection Vulnerability in Apache Traffic Control Rated 9.9 CVSS — Patch Now

Iran's Charming Kitten Deploys BellaCPP: A New C++ Variant of BellaCiao Malware

New botnet exploits vulnerabilities in NVRs, TP-Link routers

Too Much 'Trust,' Not Enough 'Verify'

FBI links North Korean hackers to $308 million crypto heist

Trump 2.0 Portends Big Shift in Cybersecurity Policies

Common Alerts

InformationalCORS Header

HighHeartbleed OpenSSL Vulnerability (Indicative)

LowStrict-Transport-Security Malformed Content (Non-compliant with Spec)

LowFull Path Disclosure

HighNoSQL Injection - MongoDB (Time Based)

HighHeartbleed OpenSSL Vulnerability

InformationalSec-Fetch-Dest Header is Missing

MediumHTTP to HTTPS Insecure Transition in Form Post

InformationalInformation Disclosure - Information in Browser sessionStorage

HighServer Side Include

Top CVE List

CVE-2024-12356 BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability

CVE-2024-20767 Adobe ColdFusion Improper Access Control Vulnerability

CVE-2021-44207 Acclaim Systems USAHERDS Use of Hard-Coded Credentials Vulnerability

CVE-2024-38812 VMware vCenter Server Heap-Based Buffer Overflow Vulnerability

CVE-2019-11001 Reolink Multiple IP Cameras OS Command Injection Vulnerability

CVE-2024-7593 Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability

CVE-2020-5849 Unraid Authentication Bypass Vulnerability

CVE-2024-43491 Microsoft Windows Update Use-After-Free Vulnerability

CVE-2017-3881 Cisco IOS and IOS XE Remote Code Execution Vulnerability

CVE-2024-38094 Microsoft SharePoint Deserialization Vulnerability

Common CWEs

CWE-690 Unchecked Return Value to NULL Pointer Dereference

CWE-87 Improper Neutralization of Alternate XSS Syntax

HighCWE-499 Serializable Class Containing Sensitive Data

CWE-477 Use of Obsolete Function

HighCWE-327 Use of a Broken or Risky Cryptographic Algorithm

LowCWE-480 Use of Incorrect Operator

CWE-334 Small Space of Random Values

HighCWE-321 Use of Hard-coded Cryptographic Key

CWE-575 EJB Bad Practices: Use of AWT Swing

CWE-135 Incorrect Calculation of Multi-Byte String Length

Free security scan for your website

Don't show website scan report rating on the leaderboard

CWE-176 - Improper Handling of Unicode Encoding

The product does not properly handle when an input contains Unicode encoding.