CVEbaza.pl › Słownik CWE › CWE-1037

Common Weakness Enumeration

CWE-1037

Processor Optimization Removal or Modification of Security-critical Code

Kategoria: BaseCVE: 5

Opis

Deweloper wbudowuje w oprogramowanie mechanizm ochrony krytyczny dla bezpieczeństwa, ale procesor optymalizuje wykonanie programu w taki sposób, że mechanizm ten jest usuwany lub modyfikowany. W rezultacie bezpieczeństwo aplikacji może być podważone przez optymalizacje wykonywane na poziomie sprzętu.

Description (EN)

The developer builds a security-critical protection mechanism into the software, but the processor optimizes the execution of the program such that the mechanism is removed or modified.

Podatności CVE z CWE-1037 (5)

8.4

CVSS

HIGH

CVE-2024-45335

Trend Micro Antivirus One, version 3.10.4 and below contains a vulnerability that could allow an attacker to use a specifically crafted virus to allow itself to bypass and evade a virus scan detection.

pub. 2024-10-22

5.9

CVSS

MEDIUM

CVE-2024-37985

Windows Kernel Information Disclosure Vulnerability

pub. 2024-09-17

5.5

CVSS

MEDIUM

CVE-2025-26636

Processor optimization removal or modification of security-critical code in Windows Kernel allows an authorized attacker to disclose information locally.

pub. 2025-07-08

5.5

CVSS

MEDIUM

CVE-2025-48809

Processor optimization removal or modification of security-critical code in Windows Kernel allows an authorized attacker to disclose information locally.

pub. 2025-07-08

5.5

CVSS

MEDIUM

CVE-2025-48810

Processor optimization removal or modification of security-critical code in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally.

pub. 2025-07-08

Informacje

ID: CWE-1037

Typ: Base

Podatności: 5

MITRE CWE ↗

← Słownik CWE