Base weakness
Draft
CWE-168: Improper Handling of Inconsistent Special Elements
The product does not properly handle input in which an inconsistency exists between two or more special characters or reserved words.
2
Recorded CVEs
With this primary weakness
0
KEVs
In the CISA KEV catalog
Not rated
Likelihood of exploit
Per MITRE
Base
Abstraction
MITRE classification
Overview
An example of this problem would be if paired characters appear in the wrong order, or if the special characters are not properly nested.
Real-world CVEs
2 recorded CVEs are caused by CWE-168 (Improper Handling of Inconsistent Special Elements). The highest-severity and most recent are shown first. 1 new CWE-168 CVE has been recorded so far in 2026.