CWE-1038: Insecure Automated Optimizations
The product uses a mechanism that automatically optimizes code, e.g. to improve a characteristic such as performance, but the optimizations can have an unintended side effect that might violate an intended security assumption.
A kind of CWE-435 Interaction Error.
From the CWE List. © The MITRE Corporation.
Newest
- discourse Discourse vulnerable to auto-executing of third-party code in embedded CodePen iframe 8.1 High
- mariadb MariaDB Server 10.10 through 10.11.* and 11.0 through 11.4.* crashes in JOIN:... 4.9 Medium
- mariadb MariaDB Server 10.4 through 10.5.*, 10.6 through 10.6.*, 10.7 through 10.11.*, 11.0 through 11.0.... 4.9 Medium
- mariadb MariaDB Server 10.4 through 10.5.*, 10.6 through 10.6.*, 10.7 through 10.11.*, and 11.0 through... 4.9 Medium
- cilium CIDR deny policies may not take effect when a more narrow CIDR allow is present 4.0 Medium
- dell chengming 3900 firmware, cpg bios, inspiron 14 plus 7420 firmware +23 more +25 more Dell BIOS versions contain an Unchecked Return Value vulnerability. A local authenticated... 3.0 Low
- dell alienware m15 r6 firmware, chengming 3980 firmware, chengming 3988 firmware +397 more +399 more Dell BIOS versions contain an Insecure Automated Optimization vulnerability. A local... 7.9 High