Common Weakness Enumeration (CWE) Program

@cweprogram.bsky.social

48 Followers 36 Following

Account maintained by the Common Weakness Enumeration (CWE™) Program to update the community on CWE-related announcements. https://cwe.mitre.org

The CVE™ Program will host a free public virtual conference, “CVE in an Era of AI-Enabled Vulnerability Discovery,” on July 30, 2026, from 10:00 AM to 2:00 PM EDT (10:00–14:00 UTC)
Common Weakness Enumeration (CWE™) “Out-Of-Bounds Read” Podcast episode: “CWE Top 25 Most Dangerous Software Weaknesses”
Common Weakness Enumeration (CWE™) Version 4.20 now available!
The CVE Program and FIRST will co-host “VulnCon 2026” at the DoubleTree Resort by Hilton Hotel Paradise Valley - Scottsdale, in Scottsdale, Arizona, USA, on April 13–16, 2026. Registration, both virtual and in-person, is open on the FIRST website.
Tree Map of the https://cwe.mitre.org/top25/archive/2025/2025_kev_list.html
Common Weakness Enumeration (CWE™) Version 4.19 now available!
The "2025 CWE Top 25 Most Dangerous Software Weaknesses" list demonstrates the currently most common and impactful software weaknesses. Often easy to find and exploit, these can lead to exploitable vulnerabilities that allow adversaries to completely take over a system, steal data, or prevent applications from working.
New Common Weakness Enumeration (CWE™) List Version Released!
Logo image of the CWE™ "2025 Most Important Hardware Weaknesses (MIHW)," which empowers organizations with the knowledge to proactively strengthen hardware security and reduce risks at the source.
Vulnerability Root Cause Mapping with CWE: Challenges, Solutions, and Insights from Grounded LLM-based Analysis
“Hard Problems in CWE, and What it Tells us about Hard Problems in the Industry,” presentation from “CVE/FIRST VulnCon 2025.” Speaker: CWE Program Technical Lead Steve Christey Coley.
CVE/FIRST VulnCon: Collaborate | Communicate | Coordinate
The CVE Program and FIRST are co-hosting "VulnCon 2025" at the McKimmon Center in Raleigh, North Carolina, USA, on April 7-10, 2025.
The CVE Program and FIRST are co-hosting "VulnCon 2025" at the McKimmon Center in Raleigh, North Carolina, USA, on April 7-10, 2025.
Tree Map of the https://cwe.mitre.org/top25/archive/2024/2024_kev_list.html
The CVE Program and FIRST are co-hosting "VulnCon 2025" at the McKimmon Center in Raleigh, North Carolina, USA, on April 7-10, 2025.
The CVE Program and FIRST are co-hosting "VulnCon 2025" at the McKimmon Center in Raleigh, North Carolina, USA, on April 7-10, 2025.
New Common Weakness Enumeration (CWE™) List Version Released!
The CVE Program and FIRST will co-host "VulnCon 2025" next week at the McKimmon Center in Raleigh, North Carolina, USA, on April 7-10, 2025. Virtual admission registration, which closes on April 4, 2025, is US $100.00.
The CVE Program and FIRST will co-host "VulnCon 2025" at the McKimmon Center in Raleigh, North Carolina, USA, on April 7-10, 2025. Registration, both virtual and in-person, is open on the FIRST website.
Common Weakness Enumeration (CWE™) Version 4.16 now available!
2024 CWE Top 25 Most Dangerous Software Weaknesses