CWE · MITRE source
CWE-758Reliance on Undefined, Unspecified, or Implementation-Defined Behavior
The product uses an API function, data structure, or other entity in a way that relies on properties that are not always guaranteed to hold for that entity.
This can lead to resultant weaknesses when the required properties change, such as when the product is ported to a different platform or if an interaction error (CWE-435) occurs.
Last updated: 20 August 2026 13:14 UTC
Control responseHuman-reviewed
Answering this weakness across the control lifecycle, from our framework cross-walks.
NIST 800-53 r5 controls that address this weakness (0)AI-assisted
| Control | Title | Family | Why it addresses this CWE |
|---|---|---|---|
| No NIST controls proposed yet. | |||
Top CVEs of this weakness type, ranked by Risk Priority
| CVE | Risk | CVSS | EPSS | Published |
|---|---|---|---|---|
CVE-2026-4705 UPD | 7.3 | 9.8 | 0.0042 | 2026-03-24 |
CVE-2026-22858 UPD | 6.9 | 9.1 | 0.0061 | 2026-01-14 |
CVE-2026-4724 UPD | 6.8 | 9.1 | 0.0032 | 2026-03-24 |
CVE-2026-16441 UPD | 6.6 | 9.6 | 0.0029 | 2026-07-21 |
CVE-2026-21677 | 6.5 | 8.8 | 0.0031 | 2026-01-06 |
CVE-2026-4718 UPD | 6.0 | 8.1 | 0.0030 | 2026-03-24 |
CVE-2026-24404 | 5.4 | 7.1 | 0.0040 | 2026-01-24 |
CVE-2026-24407 | 5.4 | 7.1 | 0.0040 | 2026-01-24 |
CVE-2026-24409 | 5.4 | 7.1 | 0.0031 | 2026-01-24 |
CVE-2026-24410 | 5.4 | 7.1 | 0.0031 | 2026-01-24 |
CVE-2026-24411 | 5.4 | 7.1 | 0.0031 | 2026-01-24 |
CVE-2026-21684 | 5.3 | 7.1 | 0.0025 | 2026-01-07 |
CVE-2026-21685 | 5.3 | 7.1 | 0.0025 | 2026-01-07 |
CVE-2026-21686 | 5.3 | 7.1 | 0.0025 | 2026-01-07 |
CVE-2026-21687 | 5.3 | 7.1 | 0.0025 | 2026-01-07 |
CVE-2024-4774 UPD | 5.1 | 6.5 | 0.0037 | 2024-05-14 |
CVE-2025-54811 UPD | 5.0 | 7.1 | 0.0020 | 2025-10-01 |
CVE-2025-55160 UPD | 4.8 | 6.1 | 0.0041 | 2025-08-13 |
CVE-2026-34549 UPD | 4.7 | 6.2 | 0.0016 | 2026-03-31 |
CVE-2026-34533 UPD | 4.6 | 6.2 | 0.0016 | 2026-03-31 |
CVE-2026-34537 UPD | 4.6 | 6.2 | 0.0016 | 2026-03-31 |
CVE-2026-34547 UPD | 4.6 | 6.2 | 0.0016 | 2026-03-31 |
CVE-2026-28528 UPD | 3.6 | 4.6 | 0.0014 | 2026-03-30 |
CVE-2023-30624 UPD | 3.4 | 3.9 | 0.0045 | 2023-04-27 |
CVE-2026-40279 | 3.2 | 3.7 | 0.0024 | 2026-04-21 |