CWE-283Unverified Ownership

Abstraction: Base · CVEs in our corpus: 24

The product does not properly verify that a critical resource is owned by the proper entity.

Last updated: 22 August 2026 14:14 UTC

Cumulative inbound coverage

How completely the frameworks we cross-walk collectively cover this — the verdict is the strongest single mapping (overlapping partials are not summed); breadth shows the corroboration behind it.

Collective: partial · 2 mapping(s) from 2 framework(s): STIG windows server 2016 1 (partial) · STIG windows server 2019 1 (partial)

See the full cumulative-coverage rollup →

OWASP Top 10 for Web (2025)

This weakness contributes to A01:2025 Broken Access Control.

Control responseHuman-reviewed

Answering this weakness across the control lifecycle, from our framework cross-walks.

Prevent

Stop it (NIST 800-53 / CSF Protect)

PR.AA-05
AC-3 Access Enforcement
AC-16 Security and Privacy Attributes
AC-24 Access Control Decisions

Detect

Catch it (CSF Detect / Respond)

—

Harden

Shrink the surface (DISA STIG)

4 hardening rules · 4 OS baselines

Validate

Prove the fix (OWASP ASVS)

—

NIST 800-53 r5 controls that address this weakness (0)AI-assisted

Control	Title	Family	Why it addresses this CWE
No NIST controls proposed yet.

Top CVEs of this weakness type, ranked by Risk Priority

CVE	Risk	CVSS	EPSS	Published
`CVE-2024-27903`	8.1	9.8	0.0892	2024-07-08
`CVE-2026-20912`	6.8	9.1	0.0042	2026-01-22
`CVE-2021-24501`	6.4	8.1	0.0125	2021-08-09
`CVE-2021-24500`	6.2	8.1	0.0065	2021-08-09
`CVE-2026-26016`	6.0	8.1	0.0032	2026-02-19
`CVE-2020-8554`	5.8	6.3	0.0927	2021-01-21
`CVE-2026-29788`	5.7	7.5	0.0026	2026-03-06
`CVE-2025-43882`	5.6	7.8	0.0013	2025-08-27
`CVE-2026-4269`	5.6	7.5	0.0024	2026-03-16
`CVE-2025-47940`	5.4	7.2	0.0044	2025-05-20
`CVE-2026-44707`	5.2	6.8	0.0034	2026-05-26
`CVE-2022-29220`	5.1	6.5	0.0048	2022-05-31
`CVE-2026-44562`	5.0	6.5	0.0029	2026-05-15
`CVE-2025-1007`	4.5	5.3	0.0050	2025-02-19
`CVE-2026-27486`	4.4	5.3	0.0029	2026-02-21
`CVE-2024-1853`	4.2	5.5	0.0020	2024-03-14
`CVE-2025-9822`	4.2	5.5	0.0024	2025-09-03
`CVE-2026-40337`	3.8	5.1	0.0015	2026-04-18
`CVE-2025-36091`	3.6	4.3	0.0033	2025-11-03
`CVE-2025-12815`	3.6	4.3	0.0029	2025-11-06
`CVE-2023-30544`	3.4	3.9	0.0042	2023-04-24
`CVE-2026-0598`	3.4	4.2	0.0022	2026-02-06
`CVE-2023-6068`	2.8	3.1	0.0034	2024-03-04
`CVE-2026-15599`	2.6	3.3	0.0009	2026-08-06