CWE-166 — known CVE vulnerabilities

CVEs classified under CWE-166, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2026-21218 — CVSS 7.5 (high): Improper handling of missing special element in .NET allows an unauthorized attacker to perform spoofing over a network.
• CVE-2024-38091 — CVSS 7.5 (high): Microsoft WS-Discovery Denial of Service Vulnerability
• CVE-2026-102082 — CVSS 5.9 (medium): An Improper Handling of Missing Special Element vulnerability in the SSL plugin of Juniper Networks Junos OS on SRX Series allows a…