A community-developed formal list or dictionary of common software weaknesses that can occur in software's architecture, design, code or implementation that can lead to exploitable security vulnerabilities.
Sources:
CNSSI 4009-2022
from
MITRE CWE - adapted