cve.bz

CWE-1329: Reliance on Component That is Not Updateable

Filter

The product contains a component that cannot be updated or patched in order to remove vulnerabilities or significant bugs.

What the weakness is: CWE-1329 at MITRE. OWASP Top 10: A03:2025 Software Supply Chain Failures. All weaknesses

Ask an AI about CWE-1329

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-1329: Reliance on Component That is Not Updateable and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/1329.html and https://cve.bz/cve/cwe/1329?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 7.9CVE-2026-48576EPSS 1.0%

    No cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.

  2. 7.9CVE-2026-48573EPSS 1.0%

    No cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.

  3. 6.7CVE-2026-41097EPSS 1.4%

    Reliance on a component that is not updateable in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.

  4. 6.4CVE-2026-21265EPSS 1.1%

    Windows Secure Boot stores Microsoft certificates in the UEFI KEK and DB. These original certificates are approaching expiration, and devices containing affected certificate versions must update them to maintain Secure Boot functionality a…

  5. 9.8CVE-2022-34381EPSS 1.0%

    Dell BSAFE SSL-J version 7.0 and all versions prior to 6.5, and Dell BSAFE Crypto-J versions prior to 6.2.6.1 contain an unmaintained third-party component vulnerability. An unauthenticated remote attacker could potentially exploit this vu…

  6. 6.8CVE-2021-38398EPSS 0.4%

    The affected device uses off-the-shelf software components that contain unpatched vulnerabilities. A malicious attacker with physical access to the affected device could exploit these vulnerabilities.