CWE-708Incorrect Ownership Assignment

Abstraction: Base · CVEs in our corpus: 21

The product assigns an owner to a resource, but the owner is outside of the intended control sphere.

This may allow the resource to be manipulated by actors outside of the intended control sphere.

Last updated: 21 August 2026 14:15 UTC

Cumulative inbound coverage

How completely the frameworks we cross-walk collectively cover this — the verdict is the strongest single mapping (overlapping partials are not summed); breadth shows the corroboration behind it.

Collective: mostly · 1 mapping(s) from 1 framework(s): STIG rhel 7 1 (mostly)

See the full cumulative-coverage rollup →

Control responseHuman-reviewed

Answering this weakness across the control lifecycle, from our framework cross-walks.

Prevent

Stop it (NIST 800-53 / CSF Protect)

PR.AA-05
AC-3 Access Enforcement
AC-16 Security and Privacy Attributes

Detect

Catch it (CSF Detect / Respond)

—

Harden

Shrink the surface (DISA STIG)

4 hardening rules · 3 OS baselines

Validate

Prove the fix (OWASP ASVS)

—

NIST 800-53 r5 controls that address this weakness (0)AI-assisted

Control	Title	Family	Why it addresses this CWE
No NIST controls proposed yet.

Top CVEs of this weakness type, ranked by Risk Priority

CVE	Risk	CVSS	EPSS	Published
`CVE-2021-32689`	6.3	8.1	0.0100	2021-07-12
`CVE-2022-33737`	6.0	7.5	0.0083	2022-07-06
`CVE-2026-40196`	6.0	8.1	0.0025	2026-04-17
`CVE-2021-32726`	5.8	7.1	0.0178	2021-07-12
`CVE-2024-52561`	5.7	7.8	0.0024	2025-06-03
`CVE-2022-22189`	5.4	7.3	0.0023	2022-04-14
`CVE-2023-20043`	5.0	6.7	0.0021	2023-01-20
`CVE-2024-41773`	5.0	6.5	0.0028	2024-08-20
`CVE-2023-20044`	4.9	6.7	0.0014	2023-01-20
`CVE-2023-29122`	4.9	6.7	0.0017	2024-11-05
`CVE-2023-4008`	4.6	5.3	0.0070	2023-08-03
`CVE-2024-45417`	4.5	6.0	0.0018	2025-02-25
`CVE-2021-26248`	4.2	5.5	0.0023	2021-11-19
`CVE-2026-32691`	4.1	5.3	0.0023	2026-03-18
`CVE-2024-45426`	3.9	4.9	0.0030	2025-02-25
`CVE-2025-14262`	3.5	4.3	0.0018	2025-12-08
`CVE-2026-6469`	3.2	3.8	0.0032	2026-08-13
`CVE-2025-5069`	3.1	3.5	0.0023	2025-09-26
`CVE-2023-41881`	3.0	3.7	0.0032	2023-10-11
`CVE-2024-9633`	2.9	3.1	0.0046	2024-11-14
`CVE-2025-5467`	2.8	3.3	0.0017	2025-12-10