CWE

Common Weakness Enumeration

A community-developed list of SW & HW weaknesses that can become vulnerabilities
New to CWE? click here!
CWE Most Important Hardware Weaknesses
CWE Top 25 Most Dangerous Weaknesses
 
ID
CWE
Knowing the weaknesses that result in vulnerabilities means software developers, hardware designers, and security architects can eliminate them before deployment, when it is much easier and cheaper to do so
Learn About CWE
Overview – Learn what CWE is and how to use the information available on this website Root Cause Mapping – Learn about identifying the underlying cause(s) of a vulnerability
Access Content
Search CWE

View CWEs by





CWE REST API
Contribute
Latest News and Updates

News CWE Is Focus of Three Talks at VulnCon 2026

News “2025 CWE Top 10 KEV Weaknesses” List Now Available

News “2025 CWE Top 25 Weaknesses “On the Cusp” List Now Available

News CWE Version 4.19.1 Now Available

News “2025 CWE™ Top 25” Now Available!

Video “Effectively Mapping CVEs to CWEs”

News “2025 CWE™ Most Important Hardware Weaknesses” Now Available


See More >>
Page Last Updated: April 08, 2026
 

Use of the Common Weakness Enumeration (CWE™) and the associated references from this website are subject to the Terms of Use. CWE is sponsored by the U.S. Department of Homeland Security (DHS) Cybersecurity and Infrastructure Security Agency (CISA) and managed by the Homeland Security Systems Engineering and Development Institute (HSSEDI) which is operated by The MITRE Corporation (MITRE). Copyright © 2006–2026, The MITRE Corporation. CWE, CWSS, CWRAF, and the CWE logo are trademarks of The MITRE Corporation.