Cyber Resilience

CWE · MITRE source

CWE-277Insecure Inherited Permissions

Abstraction: Variant · CVEs in our corpus: 71

A product defines a set of insecure permissions that are inherited by objects that are created by the program.

Last updated: 20 August 2026 13:14 UTC

Cumulative inbound coverage

How completely the frameworks we cross-walk collectively cover this — the verdict is the strongest single mapping (overlapping partials are not summed); breadth shows the corroboration behind it.

Collective: mostly · 5 mapping(s) from 3 framework(s): STIG windows server 2016 2 (mostly) · STIG windows server 2019 2 (mostly) · STIG windows server 2022 1 (mostly)

See the full cumulative-coverage rollup →

Control responseHuman-reviewed

Answering this weakness across the control lifecycle, from our framework cross-walks.

Prevent
Stop it (NIST 800-53 / CSF Protect)
  • PR.AA-05
  • PR.PS-01
  • AC-3 Access Enforcement
  • PR.PS-06
Detect
Catch it (CSF Detect / Respond)

—

Harden
Shrink the surface (DISA STIG)
  • 8 hardening rules · 3 OS baselines
Validate
Prove the fix (OWASP ASVS)

—

NIST 800-53 r5 controls that address this weakness (0)AI-assisted

Control Title Family Why it addresses this CWE
No NIST controls proposed yet.

Top CVEs of this weakness type, ranked by Risk Priority

CVE Risk CVSS EPSS Published
CVE-2021-41170 7.69.80.01532021-11-08
CVE-2024-36539 7.59.80.01262024-07-24
CVE-2024-36540 7.39.80.00422024-07-24
CVE-2023-27842 7.08.80.02402023-03-21
CVE-2024-39877 6.98.80.01732024-07-17
CVE-2024-426816.78.80.00892024-08-15
CVE-2026-7891 6.79.10.00272026-05-07
CVE-2024-36542 6.68.80.00472024-07-25
CVE-2024-6605 6.58.80.00362024-07-09
CVE-2024-34329 6.48.40.00592024-07-22
CVE-2024-7143 6.48.30.00612024-08-07
CVE-2024-29417 6.18.40.00192024-05-03
CVE-2024-27822 6.17.80.01462024-05-14
CVE-2025-58437 6.18.10.00372025-09-06
CVE-2024-41601 5.87.50.00452024-07-19
CVE-2024-23233 5.77.80.00222024-03-08
CVE-2024-27848 5.77.80.00202024-06-10
CVE-2023-33990 5.67.80.00162023-07-11
CVE-2025-37174 5.57.20.00492026-01-13
CVE-2026-30266 5.57.80.00122026-04-20
CVE-2020-5343 5.47.30.00272020-05-04
CVE-2025-20008 5.37.70.00172025-05-13
CVE-2024-27825 5.27.10.00192024-05-14
CVE-2023-34391 5.07.40.00132023-08-31
CVE-2025-29982 5.06.80.00142025-04-02