Cyber Resilience

CWE · MITRE source

CWE-453Insecure Default Variable Initialization

Abstraction: Variant · CVEs in our corpus: 19

The product, by default, initializes an internal variable with an insecure or less secure value than is possible.

Last updated: 20 August 2026 13:14 UTC

Control responseHuman-reviewed

Answering this weakness across the control lifecycle, from our framework cross-walks.

Prevent
Stop it (NIST 800-53 / CSF Protect)
  • PR.PS-01
  • PR.PS-06
  • CM-6 Configuration Settings
  • CM-2 Baseline Configuration
Detect
Catch it (CSF Detect / Respond)

—

Harden
Shrink the surface (DISA STIG)
  • 4 hardening rules · 2 OS baselines
Validate
Prove the fix (OWASP ASVS)

—

NIST 800-53 r5 controls that address this weakness (0)AI-assisted

Control Title Family Why it addresses this CWE
No NIST controls proposed yet.

Top CVEs of this weakness type, ranked by Risk Priority

CVE Risk CVSS EPSS Published
CVE-2021-27426 7.59.80.01212022-03-23
CVE-2025-30206 7.49.80.00802025-04-15
CVE-2024-21411 7.08.80.02622024-03-12
CVE-2025-47945 6.99.10.00662025-05-17
CVE-2024-49120 6.38.10.01082024-12-12
CVE-2022-3262 6.28.10.00722022-12-08
CVE-2023-27516 5.67.30.00532023-10-12
CVE-2024-41255 5.67.50.00262024-07-31
CVE-2026-00825.67.80.00162026-06-17
CVE-2025-48563 5.57.80.00092025-09-04
CVE-2022-46831 4.96.60.00452022-12-08
CVE-2024-39916 4.76.40.00292024-07-12
CVE-2022-47194 4.45.40.00822023-01-19
CVE-2022-47197 4.45.40.01022023-01-19
CVE-2022-47195 4.35.40.00682023-01-19
CVE-2022-47196 4.35.40.00682023-01-19
CVE-2026-192123.64.30.00272026-08-07
CVE-2026-413303.44.40.00122026-04-21