CWE-221Class

Information Loss or Omission

Incomplete in the CWE catalog · 3 CVEs mapped

3
CVEs mapped
5.0
Median CVSS
What it is

The product does not record, or improperly records, security-relevant information that leads to an incorrect decision or hampers later analysis.

Recent examples
4.3cvss
CVE-2026-106287

CVE-2026-106287 - MEDIUM Severity Vulnerability

Information loss in CORS in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via crafted network traffic. (Chromium security severity: Low)

MEDIUMno explanation yet
0%
epss
6.5cvss
CVE-2026-87535

CVE-2026-87535 - MEDIUM Severity Vulnerability

Information loss or omission in Safebrowsing in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)

MEDIUMno explanation yet
0%
epss
5.0cvss
CVE-2025-62306

CVE-2025-62306 - MEDIUM Severity Vulnerability

HCL IntelliOps Event Management (IEM) is affected by information omission. The lack of information breaks auditability and observability of a workflow. if an attacker were to gain access to the application, the insufficient logging could hinder incident response.

MEDIUMno explanation yet
0%
epss
The record
Technical detail
CWE ID
CWE-221
Abstraction
Class
Structure
Simple
Status
Incomplete