CWE-682Incorrect Calculation

Abstraction: Pillar · CVEs in our corpus: 143

The product performs a calculation that generates incorrect or unintended results that are later used in security-critical decisions or resource management.

When product performs a security-critical calculation incorrectly, it might lead to incorrect resource allocations, incorrect privilege assignments, or failed comparisons among other things. Many of the direct results of an incorrect calculation can lead to even larger problems such as failed protection mechanisms or even arbitrary code execution.

Last updated: 25 September 2026 21:25 UTC

Control responseHuman-reviewed

Answering this weakness across the control lifecycle, from our framework cross-walks.

Prevent

Stop it (NIST 800-53 / CSF Protect)

PR.PS-06
SA-11 Developer Testing and Evaluation
SA-8 Security and Privacy Engineering Principles
SA-15 Development Process, Standards, and Tools

Detect

Catch it (CSF Detect / Respond)

—

Harden

Shrink the surface (DISA STIG)

—

Validate

Prove the fix (OWASP ASVS)

V15.2.2

NIST 800-53 r5 controls that address this weakness (0)AI-assisted

Control	Title	Family	Why it addresses this CWE
No NIST controls proposed yet.

Top CVEs of this weakness type, ranked by Risk Priority

CVE	Risk	CVSS	EPSS	Published
`CVE-2018-8319`	8.1	9.8	0.0750	2018-07-11
`CVE-2022-30780`	8.1	7.5	0.5692	2022-06-11
`CVE-2021-44847`	7.9	9.8	0.0395	2021-12-13
`CVE-2022-30600`	7.9	9.8	0.0510	2022-05-18
`CVE-2023-2163`	7.8	10.0	0.0367	2023-09-20
`CVE-2020-0022`	7.3	8.8	0.0605	2020-02-13
`CVE-2020-0221`	7.3	9.8	0.0047	2020-05-14
`CVE-2022-23066`	7.3	9.1	0.0236	2022-05-09
`CVE-2023-35641`	7.3	8.8	0.0722	2023-12-12
`CVE-2024-36736`	7.3	9.8	0.0056	2024-06-06
`CVE-2026-1229`	7.3	9.8	0.0040	2026-02-24
`CVE-2026-16363`	7.3	9.8	0.0044	2026-07-21
`CVE-2021-45960`	7.1	8.8	0.0423	2022-01-01
`CVE-2017-8326`	7.0	8.8	0.0243	2017-04-29
`CVE-2019-16346`	6.9	8.8	0.0164	2019-09-16
`CVE-2022-28048`	6.9	8.8	0.0158	2022-04-15
`CVE-2026-71479`	6.9	9.1	0.0065	2026-08-17
`CVE-2017-13151`	6.8	8.8	0.0144	2017-12-06
`CVE-2019-16347`	6.8	8.8	0.0150	2019-09-16
`CVE-2026-54754`	6.8	9.6	0.0043	2026-08-28
`CVE-2019-5853`	6.7	8.8	0.0098	2019-11-25
`CVE-2019-17514`	6.5	7.5	0.0467	2019-10-12
`CVE-2023-2423`	6.5	8.6	0.0120	2023-08-08
`CVE-2026-76043`	6.5	8.8	0.0041	2026-08-18
`CVE-2026-20275`	6.4	8.8	0.0020	2026-09-02