CWE-310: Cryptographic Issues
Weaknesses in this category are related to the design and implementation of data confidentiality and integrity. Frequently these deal with the use of encoding techniques, encryption libraries, and hashing algorithms. The weaknesses in this category could lead to a degradation of the quality data if they are not addressed.
Last updated
Weaknesses in this category
- CWE-261: Weak Encoding for Password
- CWE-324: Use of a Key Past its Expiration Date
- CWE-325: Missing Cryptographic Step
- CWE-328: Use of Weak Hash
- CWE-331: Insufficient Entropy
- CWE-334: Small Space of Random Values
- CWE-335: Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG)
- CWE-338: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
- CWE-347: Improper Verification of Cryptographic Signature
- CWE-916: Use of Password Hash With Insufficient Computational Effort
- CWE-1204: Generation of Weak Initialization Vector (IV)
- CWE-1240: Use of a Cryptographic Primitive with a Risky Implementation
Real-world CVEs
2,285 recorded CVEs are caused by CWE-310 (Cryptographic Issues). The highest-severity and most recent are shown first. 3 new CWE-310 CVEs have been recorded so far in 2026 (2 in 2025).
- CVE-2014-7878Critical · CVSS 10.0 · EPSS 96th2014-11-14
- CVE-2013-3712Critical · CVSS 10.0 · EPSS 72th2014-02-26
- CVE-2013-6952Critical · CVSS 10.0 · EPSS 90th2014-02-22
- CVE-2013-6838Critical · CVSS 10.0 · EPSS 87th2014-01-28
- CVE-2013-0137Critical · CVSS 10.0 · EPSS 96th2013-06-29
- CVE-2011-5121Critical · CVSS 10.0 · EPSS 69th2012-08-26
- CVE-2011-5123Critical · CVSS 10.0 · EPSS 69th2012-08-26
- CVE-2012-2405Critical · CVSS 10.0 · EPSS 68th2012-04-22
- CVE-2011-4684Critical · CVSS 10.0 · EPSS 93th2011-12-07
- CVE-2011-2344Critical · CVSS 10.0 · EPSS 67th2011-07-08
- CVE-2011-0935Critical · CVSS 10.0 · EPSS 91th2011-04-14
- CVE-2010-2978Critical · CVSS 10.0 · EPSS 79th2010-08-09
Showing 12 of 2,285 recorded CWE-310 CVEs. Get an alert for each new one, with AI-written analysis and fixes.
Monitor these CVEsFrequently asked questions
Common questions about CWE-310.
- What is CWE-310?
- Weaknesses in this category are related to the design and implementation of data confidentiality and integrity. Frequently these deal with the use of encoding techniques, encryption libraries, and hashing algorithms. The weaknesses in this category could lead to a degradation of the quality data if they are not addressed.
- What CVEs are caused by CWE-310?
- 2,285 recorded CVEs are attributed to CWE-310, including CVE-2014-7878, CVE-2013-3712 and CVE-2013-6952.
- Is CWE-310 actively exploited?
- 2,285 recorded CVEs are caused by CWE-310; none are currently in CISA's KEV catalog of actively exploited flaws.
Sources
- [1]Writing Secure Code (2002)
- [2]Supplemental Details - 2022 CWE Top 25 (2022)
References
- MITRE CWE definition (CWE-310) (opens in a new tab)
- CWE-310 vulnerabilities on NVD (opens in a new tab)
- Learn: What is a CWE?
Weakness data is sourced from the MITRE CWE catalog (v4.20). CVE associations are aggregated and kept current by RadicalNotion.AI.