CWE-708: Incorrect Ownership Assignment
The product assigns an owner to a resource, but the owner is outside of the intended control sphere.
Overview
This may allow the resource to be manipulated by actors outside of the intended control sphere.
Real-world CVEs
20 recorded CVEs are caused by CWE-708 (Incorrect Ownership Assignment). The highest-severity and most recent are shown first. 2 new CWE-708 CVEs have been recorded so far in 2026 (6 in 2025).