CWE-1222 Insufficient Granularity of Address Regions Protected by Register Locks

variant

The product defines a large address region protected from modification by the same register lock control bit. This results in a conflict between the functional requirement that some addresses need to be writable by software during operation and the security requirement that the system configuration lock bit must be set during the boot process.

01

parent weaknesses

Broader classes this is a kind of.

02

vulnerabilities (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2025-21283UShigh8.8—
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
03

attack patterns (1)

CAPEC attack patterns that exploit this.

04

source

Where this definition is published.

scry

Weaknesses like this turn up in real, exploitable exposures. See what is exposed on your perimeter with a free passive scan.

Free scan