cve.bz

CWE-1037: Processor Optimization Removal or Modification of Security-critical Code

Filter

The developer builds a security-critical protection mechanism into the software, but the processor optimizes the execution of the program such that the mechanism is removed or modified.

What the weakness is: CWE-1037 at MITRE. All weaknesses

Related attack patterns (CAPEC): 1
  • CAPEC-663 Exploitation of Transient Instruction Execution Likelihood: Low · Severity: Very High

The attack patterns MITRE's CAPEC relates to CWE-1037, as MITRE names them. Credits.

Ask an AI about CWE-1037

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-1037: Processor Optimization Removal or Modification of Security-critical Code and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/1037.html and https://cve.bz/cve/cwe/1037?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 5.5CVE-2025-48810EPSS 0.5%

    Processor optimization removal or modification of security-critical code in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally.

  2. 5.5CVE-2025-48809EPSS 0.5%

    Processor optimization removal or modification of security-critical code in Windows Kernel allows an authorized attacker to disclose information locally.

  3. 5.5CVE-2025-26636EPSS 0.5%

    Processor optimization removal or modification of security-critical code in Windows Kernel allows an authorized attacker to disclose information locally.

  4. 5.5CVE-2024-45335EPSS 0.2%

    Trend Micro Antivirus One, version 3.10.4 and below contains a vulnerability that could allow an attacker to use a specifically crafted virus to allow itself to bypass and evade a virus scan detection.

  5. 5.6CVE-2024-37985EPSS 0.7%

    Windows Kernel Information Disclosure Vulnerability