CWE Top 25 Most Dangerous Software Weaknesses (2024)
The 2024 CWE Top 25 Most Dangerous Software Weaknesses published by MITRE Corporation and supported by CISA. Based on analysis of 31,770 CVE records scored by frequency multiplied by severity (CVSS).
Domains
Memory Safety
Authorization and Authentication
Data Protection and Integrity
File and Path Handling
Injection and Input Validation
Frequently Asked Questions
Map CWE Top 25 Most Dangerous Software Weaknesses (2024) to any other framework
Use our AI-powered compliance platform to find control overlaps, gaps, and build remediation plans in seconds.