CWE-1037Base

Processor Optimization Removal or Modification of Security-critical Code

Incomplete in the CWE catalog · 4 CVEs mapped

4
CVEs mapped
5.5
Median CVSS
What it is

The developer builds a security-critical protection mechanism into the software, but the processor optimizes the execution of the program such that the mechanism is removed or modified.

Recent examples
5.5cvss
CVE-2025-48810

Windows Secure Kernel Mode Information Disclosure Vulnerability

Processor optimization removal or modification of security-critical code in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally.

MEDIUMno explanation yet
0%
epss
5.5cvss
CVE-2025-48809

Windows Secure Kernel Mode Information Disclosure Vulnerability

Processor optimization removal or modification of security-critical code in Windows Kernel allows an authorized attacker to disclose information locally.

MEDIUMno explanation yet
0%
epss
5.5cvss
CVE-2025-26636

Windows Kernel Information Disclosure Vulnerability

Processor optimization removal or modification of security-critical code in Windows Kernel allows an authorized attacker to disclose information locally.

MEDIUMno explanation yet
0%
epss
The record
Technical detail
CWE ID
CWE-1037
Abstraction
Base
Structure
Simple
Status
Incomplete
References (2)