CWE-1038 · 6 records

Insecure Automated Optimizations

CVEs in this class

6 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
32Monitor	CVE-2025-48877No exploit	Discourse vulnerable to auto-executing of third-party code in embedded CodePen iframediscourse · discourse · CWE-1038 Pre-auth	High8.1	—	0.4%	Jun 9, 2025
31Monitor	CVE-2022-26861No exploit	Dell BIOS versions contain an Insecure Automated Optimization vulnerability.dell · alienware m15 r6 firmware · CWE-1038 RCE	High7.8	—	0.2%	Sep 6, 2022
20Monitor	CVE-2022-31220No exploit	Dell BIOS versions contain an Unchecked Return Value vulnerability.dell · chengming 3900 firmware · CWE-1038	Medium5.1	—	0.1%	Sep 12, 2022
19Monitor	CVE-2023-52971No exploit	MariaDB Server 10.10 through 10.11.* and 11.0 through 11.4.* crashes in JOIN::fix_all_splittings_in_plan.mariadb · mariadb · CWE-1038 Denial of service	Medium4.9	—	0.4%	Mar 8, 2025
19Monitor	CVE-2023-52969No exploit	MariaDB Server 10.4 through 10.5., 10.6 through 10.6., 10.7 through 10.11., and 11.0 through 11.0. can sometimes crash with an empty bacmariadb · mariadb · CWE-1038 Denial of service	Medium4.9	—	0.4%	Mar 8, 2025
19Monitor	CVE-2023-52970No exploit	MariaDB Server 10.4 through 10.5., 10.6 through 10.6., 10.7 through 10.11., 11.0 through 11.0., and 11.1 through 11.4.* crashes in Item_mariadb · mariadb · CWE-1038 Denial of service	Medium4.9	—	0.4%	Mar 8, 2025

CVE-2025-48877
32Monitor
Discourse vulnerable to auto-executing of third-party code in embedded CodePen iframe
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
discourse · discourseJun 9, 2025
CVE-2022-26861
31Monitor
Dell BIOS versions contain an Insecure Automated Optimization vulnerability.
HighCVSS 7.8No exploitEPSS 0%
- RCE
dell · alienware m15 r6 firmwareSep 6, 2022
CVE-2022-31220
20Monitor
Dell BIOS versions contain an Unchecked Return Value vulnerability.
MediumCVSS 5.1No exploitEPSS 0%
dell · chengming 3900 firmwareSep 12, 2022
CVE-2023-52971
19Monitor
MariaDB Server 10.10 through 10.11.* and 11.0 through 11.4.* crashes in JOIN::fix_all_splittings_in_plan.
MediumCVSS 4.9No exploitEPSS 0%
- Denial of service
mariadb · mariadbMar 8, 2025
CVE-2023-52969
19Monitor
MariaDB Server 10.4 through 10.5.*, 10.6 through 10.6.*, 10.7 through 10.11.*, and 11.0 through 11.0.* can sometimes crash with an empty bac
MediumCVSS 4.9No exploitEPSS 0%
- Denial of service
mariadb · mariadbMar 8, 2025
CVE-2023-52970
19Monitor
MariaDB Server 10.4 through 10.5.*, 10.6 through 10.6.*, 10.7 through 10.11.*, 11.0 through 11.0.*, and 11.1 through 11.4.* crashes in Item_
MediumCVSS 4.9No exploitEPSS 0%
- Denial of service
mariadb · mariadbMar 8, 2025