Home/CWEs/CWE info/

CWE-176 - Improper Handling of Unicode Encoding

CWE-176

Abstraction:
Variant

Structure:
Simple

Status:
Draft

Weakness Name: Improper Handling of Unicode Encoding

Description: The product does not properly handle when an input contains Unicode encoding.

Common Consequences: Scope: Integrity
Impact: Unexpected State

Related Weaknesses: CWE-172Encoding Error

Release Date:
2006-07-19

Latest Modification Date:
2024-02-29

Top Security News

Ivanti Flaw CVE-2025-0282 Actively Exploited, Impacts Connect Secure and Policy Secure

CISA Adds Second BeyondTrust Flaw to KEV Catalog Amid Active Attacks

Risk, Reputational Scores Enjoy Mixed Success as Security Tools

Windows Server 2025 released—here are the new features

Apache Tomcat Vulnerability CVE-2024-56337 Exposes Servers to RCE Attacks

Microsoft: macOS bug lets hackers install malicious kernel drivers

FBI deletes Chinese PlugX malware from thousands of US computers

Google Cloud Researchers Uncover Flaws in Rsync File Synchronization Tool

Common Alerts

InformationalLoosely Scoped Cookie

InformationalInformation Disclosure - JWT in Browser sessionStorage

MediumSource Code Disclosure - SVN

MediumInsecure HTTP Method

MediumX-Frame-Options Setting Malformed

LowDeprecated Feature Policy Header Set

LowX-AspNet-Version Response Header

HighSource Code Disclosure - /WEB-INF Folder

InformationalObsolete Content Security Policy (CSP) Header Found

MediumCRLF Injection

Latest CVE List

CVE-2024-50603 Aviatrix Controllers OS Command Injection Vulnerability

CVE-2024-55591 Fortinet FortiOS Authorization Bypass Vulnerability

CVE-2025-21333 Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability

CVE-2025-21334 Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability

CVE-2025-21335 Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability

CVE-2024-12686 BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS Command Injection Vulnerability

CVE-2023-48365 Qlik Sense HTTP Tunneling Vulnerability

CVE-2025-0282 Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability

CVE-2024-41713 Mitel MiCollab Path Traversal Vulnerability

CVE-2024-55550 Mitel MiCollab Path Traversal Vulnerability

Top CWE List

HighCWE-200 Exposure of Sensitive Information to an Unauthorized Actor

CWE-581 Object Model Violation: Just One of Equals and Hashcode Defined

HighCWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

CWE-1053 Missing Documentation for Design

CWE-304 Missing Critical Step in Authentication

CWE-307 Improper Restriction of Excessive Authentication Attempts

HighCWE-116 Improper Encoding or Escaping of Output

CWE-284 Improper Access Control

HighCWE-330 Use of Insufficiently Random Values

CWE-615 Inclusion of Sensitive Information in Source Code Comments

Free online web security scanner

Don't show website scan report rating on the leaderboard

CWE-176 - Improper Handling of Unicode Encoding

The product does not properly handle when an input contains Unicode encoding.