CWE-733 · Input Validation and Logic
Compiler Optimization Removal or Modification of Security-critical Code
5CVEs
SortMost likely exploited
5 CVEs with CWE-733 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2025-13024JIT miscompilation in the JavaScript Engine: JIT componentMozilla · Firefox · CVSS 9.8 · 2025-11-11 | 9.8 | 0.4% | 2025-11-11 |
| CVE-2020-15294Compiler Optimization Removal or Modification of Security-Critical Code vulnerability in Bitdefender Hypervisor Introspection (VA-9339)Bitdefender · Hypervisor Introspection · CVSS 7.8 · 2020-12-17 | 7.8 | 0.3% | 2020-12-17 |
| CVE-2025-20241Cisco Nexus 3000 and 9000 Series Switches IS-IS Protocol <TBD> Denial of Service VulnerabilityCisco · Cisco NX-OS Software · CVSS 7.4 · 2025-08-27 | 7.4 | 0.3% | 2025-08-27 |
| CVE-2025-52496Mbed TLS before 3.6.4 has a race condition in AESNI detection if certain compiler optimizations occur. An attacker may be able to extract an AES key from a multithreaded program,…Mbed · mbedtls · CVSS 7.8 · 2025-07-04 | 7.8 | 0.2% | 2025-07-04 |
| CVE-2024-58262The curve25519-dalek crate before 4.1.3 for Rust has a constant-time operation on elliptic curve scalars that is removed by LLVM.dalek-cryptography · curve25519-dalek · CVSS 2.9 · 2025-07-27 | 2.9 | 0.2% | 2025-07-27 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.