CWE-1037
Processor Optimization Removal or Modification of Security-critical Code
Description
The developer builds a security-critical protection mechanism into the software, but the processor optimizes the execution of the program such that the mechanism is removed or modified.
Hierarchy (View 1000)
Parents
Children
none
Related attack patterns (CAPEC)
CAPEC-663
CVEs mapped to this weakness (5)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2024-45335 | Hig | 0.55 | 8.4 | 0.00 | Oct 22, 2024 | Trend Micro Antivirus One, version 3.10.4 and below contains a vulnerability that could allow an attacker to use a specifically crafted virus to allow itself to bypass and evade a virus scan detection. | ||
| CVE-2024-37985 | Med | 0.38 | 5.9 | 0.01 | Sep 17, 2024 | Windows Kernel Information Disclosure Vulnerability | ||
| CVE-2025-48810 | Med | 0.36 | 5.5 | 0.00 | Jul 8, 2025 | Processor optimization removal or modification of security-critical code in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally. | ||
| CVE-2025-48809 | Med | 0.36 | 5.5 | 0.00 | Jul 8, 2025 | Processor optimization removal or modification of security-critical code in Windows Kernel allows an authorized attacker to disclose information locally. | ||
| CVE-2025-26636 | Med | 0.36 | 5.5 | 0.00 | Jul 8, 2025 | Processor optimization removal or modification of security-critical code in Windows Kernel allows an authorized attacker to disclose information locally. |
- risk 0.55cvss 8.4epss 0.00
Trend Micro Antivirus One, version 3.10.4 and below contains a vulnerability that could allow an attacker to use a specifically crafted virus to allow itself to bypass and evade a virus scan detection.
- risk 0.38cvss 5.9epss 0.01
Windows Kernel Information Disclosure Vulnerability
- risk 0.36cvss 5.5epss 0.00
Processor optimization removal or modification of security-critical code in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally.
- risk 0.36cvss 5.5epss 0.00
Processor optimization removal or modification of security-critical code in Windows Kernel allows an authorized attacker to disclose information locally.
- risk 0.36cvss 5.5epss 0.00
Processor optimization removal or modification of security-critical code in Windows Kernel allows an authorized attacker to disclose information locally.