CWE Top 25

Missing-Authorisation-KrishnaG-CEO

2024 CWE Top 25 Most Dangerous Software Weaknesses: Missing Authorisation (CWE-862)

by

Missing Authorisation, identified by CWE-862, refers to a software weakness where an application fails to verify if a user is permitted to access specific resources or perform certain actions. While authentication establishes identity, authorisation ensures that the authenticated user has the necessary permissions. When authorisation is missing, attackers can exploit this oversight to access sensitive data, perform unauthorised transactions, or disrupt services.

Use-After-Free-KrishnaG-CEO

2024 CWE Top 25 Most Dangerous Software Weaknesses: Use After Free (CWE-416)

by

At its core, a Use After Free vulnerability occurs when a program continues to use memory after it has been freed or deallocated. This behaviour can result in undefined behaviour, ranging from crashes and data corruption to critical security breaches, including arbitrary code execution.

OoBR-KrishnaG-CEO

2024 CWE Top 25 Most Dangerous Software Weaknesses: Out-of-Bounds Read (CWE-125)

by

Out-of-Bounds Read occurs when a program reads data past the allocated boundary of a buffer. This behaviour typically arises from improper validation of input data or incorrect indexing in memory operations. By exploiting this weakness, attackers can gain unauthorised access to sensitive information, potentially leading to security violations.

XSS-KrishnaG-CEO

Understanding CWE-79: Cross-Site Scripting (XSS) in 2024 – A Strategic Guide for Software Architects and C-Suite Executives

by

At its core, XSS exploits the trust a user places in a web application. By manipulating input fields, URLs, or other interactive elements, attackers can introduce scripts that execute commands, steal sensitive information, or alter website functionality.