Insecure Automated Optimizations
CWE-1038
The product uses a mechanism that automatically optimizes code, e.g. to improve a characteristic such as performance, but the optimizations can have an unintended side effect that might violate an intended security assumption.
We track 2 vulnerabilities of this type. 100% are rated high or critical, and the average CVSS score is 8.8.
Latest Insecure Automated Optimizations vulnerabilities
- 9.8 Critical severity
discourse: Insecure Automated Optimizations
Discourse is an open-source discussion platform. Prior to version 3.4.4 of the `stable` branch, version 3.5.0.beta5 of the `beta` branch, and version 3.5.0.beta6-dev of the `tests-passed` branch, Codepen is present in the default `allowed_iframes` site setting
- 7.8 High severity
CPG BIOS: Insecure Automated Optimizations
Dell BIOS versions contain an Insecure Automated Optimization vulnerability. A local authenticated malicious user could exploit this vulnerability by sending malicious input via SMI to obtain arbitrary code execution during SMM.