https://cwe.mitre.org/top25/index.html

CWE

Common Weakness Enumeration

A Community-Developed List of Software & Hardware Weakness Types

New to CWE? click here!
CWE Most Important Hardware Weaknesses
CWE Top 25 Most Dangerous Weaknesses
Home > CWE Top 25              ID Lookup: [                    ] [Go]
---------------------------------------------------------------------

  * Home
  * About
    Overview New to CWE User Stories History Documents FAQs Glossary
    Compatibility
  * CWE List
    Latest Version Downloads Reports Visualizations Archive
  * Mapping
    CVE - CWE Mapping Guidance CVE - CWE Mapping Quick Tips CVE - CWE
    Mapping Examples Common Terms Cheatsheet
  * Top-N Lists
    Top 25 Software Top Hardware Other Scoring Methodologies
  * Community
    Community Working Groups & Special Interest Groups Board Board
    Meeting Minutes Discussion List Discussion Archives Content
    Suggestions
  * News
    Current News Twitter # LinkedIn # YouTube YouTube Podcast Out of
    Bounds Read Podcast Medium Medium News Archive
  * Search

 
 CWE Glossary Definition                  x
 

 CWE Top 25 Most Dangerous Software Weaknesses

        Welcome to the 2023 Common Weakness Enumeration (CWE(tm)) Top
        25 Most Dangerous Software Weaknesses list (CWE(tm) Top 25).
        This list demonstrates the currently most common and
        impactful software weaknesses.
 CWE
 Top 25 Often easy to find and exploit, these can lead to
 logo   exploitable vulnerabilities that allow adversaries to
        completely take over a system, steal data, or prevent
        applications from working.

        2023 Top 25 List         Key Insights       Methodology

 CWEs are becoming more and more prevalent in vulnerability exposure
 conversations as the community looks to avoid the root causes that
 can become vulnerabilities. Links to information and documents that
 will help you understand and use the CWE Top 25 more effectively
 are noted below. Additional information will be added throughout
 the summer of 2023.

 Available now:

   * 2023 "On the Cusp" Weaknesses List -- 15 additional weaknesses
     that were "on the cusp" of being included in the 2023 CWE Top
     25.
   * 2023 On the Cusp Weaknesses Insights -- A discussion about the
     On the Cusp CWEs that continue to be prevalent and severe
     enough to cause concern.

 Topics to look for in the coming months include:

   * Trends in Real-World CWEs: 2019 to 2023 -- A discussion of
     overall trends and what it means for your IT infrastructure.
   * Actively Exploited -- Ranking weaknesses by CISA's KEV Catalog.
   * CWEs and Root-Cause Mapping -- The path to clarifying sources of
     vulnerabilities as we as a community work to eradicate
     vulnerabilities from your IT infrastructure.
   * CWE Top 25 Remapping Notes -- The team's root cause mapping
     analysis comments by CVE Record.


 Top 25 Archive

                                                         Back to top
 More information is available -- Please edit the custom filter or
 select a different filter.
Page Last Updated: July 13, 2023
 
      Site Map | Terms of Use | Privacy Policy | Contact Us |
      CWE Twitter CWE on LinkedIn CWE YouTube channel CWE
      Out-of-Bounds-Read Podcast CWE Blog on Medium blog

      Use of the Common Weakness Enumeration (CWE) and the
      associated references from this website are subject to
      the Terms of Use. CWE is sponsored by the U.S.
MITRE Department of Homeland Security (DHS) Cybersecurity and  HSSEDI
      Infrastructure Security Agency (CISA) and managed by the
      Homeland Security Systems Engineering and Development
      Institute (HSSEDI) which is operated by The MITRE
      Corporation (MITRE). Copyright (c) 2006-2023, The MITRE
      Corporation. CWE, CWSS, CWRAF, and the CWE logo are
      trademarks of The MITRE Corporation.