| HasMember | Prohibited | C | 1059 | Insufficient Technical Documentation |
| HasMember | Allowed | B | 1191 | On-Chip Debug and Test Interface With Improper Access Control |
| HasMember | Allowed | B | 1209 | Failure to Disable Reserved Bits |
| HasMember | Allowed | B | 1220 | Insufficient Granularity of Access Control |
| HasMember | Allowed | V | 1222 | Insufficient Granularity of Address Regions Protected by Register Locks |
| HasMember | Allowed-with-Review | C | 1229 | Creation of Emergent Resource |
| HasMember | Allowed | B | 1230 | Exposure of Sensitive Information Through Metadata |
| HasMember | Allowed | B | 1231 | Improper Prevention of Lock Bit Modification |
| HasMember | Allowed | B | 1232 | Improper Lock Behavior After Power State Transition |
| HasMember | Allowed | B | 1233 | Security-Sensitive Hardware Controls with Missing Lock Bit Protection |
| HasMember | Allowed | B | 1234 | Hardware Internal or Debug Modes Allow Override of Locks |
| HasMember | Allowed | B | 1235 | Incorrect Use of Autoboxing and Unboxing for Performance Critical Operations |
| HasMember | Allowed | B | 1236 | Improper Neutralization of Formula Elements in a CSV File |
| HasMember | Allowed | V | 1239 | Improper Zeroization of Hardware Register |
| HasMember | Allowed | B | 1240 | Use of a Cryptographic Primitive with a Risky Implementation |
| HasMember | Allowed | B | 1242 | Inclusion of Undocumented Features or Chicken Bits |
| HasMember | Allowed | B | 1243 | Sensitive Non-Volatile Information Not Protected During Debug |
| HasMember | Allowed | B | 1244 | Internal Asset Exposed to Unsafe Debug Access Level or State |
| HasMember | Allowed | B | 1245 | Improper Finite State Machines (FSMs) in Hardware Logic |
| HasMember | Allowed | B | 1246 | Improper Write Handling in Limited-write Non-Volatile Memories |
| HasMember | Allowed | B | 1247 | Improper Protection Against Voltage and Clock Glitches |
| HasMember | Allowed | B | 1248 | Semiconductor Defects in Hardware Logic with Security-Sensitive Implications |
| HasMember | Allowed | B | 1249 | Application-Level Admin Tool with Inconsistent View of Underlying Operating System |
| HasMember | Allowed | B | 1250 | Improper Preservation of Consistency Between Independent Representations of Shared State |
| HasMember | Allowed | B | 1251 | Mirrored Regions with Different Values |
| HasMember | Allowed | B | 1252 | CPU Hardware Not Configured to Support Exclusivity of Write and Execute Operations |
| HasMember | Allowed | B | 1253 | Incorrect Selection of Fuse Values |
| HasMember | Allowed | B | 1254 | Incorrect Comparison Logic Granularity |
| HasMember | Allowed | V | 1255 | Comparison Logic is Vulnerable to Power Side-Channel Attacks |
| HasMember | Allowed | B | 1256 | Improper Restriction of Software Interfaces to Hardware Features |
| HasMember | Allowed | B | 1257 | Improper Access Control Applied to Mirrored or Aliased Memory Regions |
| HasMember | Allowed | B | 1258 | Exposure of Sensitive System Information Due to Uncleared Debug Information |
| HasMember | Allowed | B | 1259 | Improper Restriction of Security Token Assignment |
| HasMember | Allowed | B | 1260 | Improper Handling of Overlap Between Protected Memory Ranges |
| HasMember | Allowed | B | 1261 | Improper Handling of Single Event Upsets |
| HasMember | Allowed | B | 1262 | Improper Access Control for Register Interface |
| HasMember | Allowed-with-Review | C | 1263 | Improper Physical Access Control |
| HasMember | Allowed | B | 1264 | Hardware Logic with Insecure De-Synchronization between Control and Data Channels |
| HasMember | Allowed | B | 1266 | Improper Scrubbing of Sensitive Data from Decommissioned Device |
| HasMember | Allowed | B | 1267 | Policy Uses Obsolete Encoding |
| HasMember | Allowed | B | 1268 | Policy Privileges are not Assigned Consistently Between Control and Data Agents |
| HasMember | Allowed | B | 1269 | Product Released in Non-Release Configuration |
| HasMember | Allowed | B | 1270 | Generation of Incorrect Security Tokens |
| HasMember | Allowed | B | 1271 | Uninitialized Value on Reset for Registers Holding Security Settings |
| HasMember | Allowed | B | 1272 | Sensitive Information Uncleared Before Debug/Power State Transition |
| HasMember | Allowed | B | 1273 | Device Unlock Credential Sharing |
| HasMember | Allowed | B | 1274 | Improper Access Control for Volatile Memory Containing Boot Code |
| HasMember | Allowed | V | 1275 | Sensitive Cookie with Improper SameSite Attribute |
| HasMember | Allowed | B | 1276 | Hardware Child Block Incorrectly Connected to Parent System |
| HasMember | Allowed | B | 1277 | Firmware Not Updateable |
| HasMember | Allowed | B | 1278 | Missing Protection Against Hardware Reverse Engineering Using Integrated Circuit (IC) Imaging Techniques |
| HasMember | Allowed | B | 1279 | Cryptographic Operations are run Before Supporting Units are Ready |
| HasMember | Allowed | B | 1280 | Access Control Check Implemented After Asset is Accessed |
| HasMember | Allowed | B | 1281 | Sequence of Processor Instructions Leads to Unexpected Behavior |
| HasMember | Allowed | B | 1282 | Assumed-Immutable Data is Stored in Writable Memory |
| HasMember | Allowed | B | 1283 | Mutable Attestation or Measurement Reporting Data |
| HasMember | Allowed | B | 1290 | Incorrect Decoding of Security Identifiers |
| HasMember | Allowed | B | 1291 | Public Key Re-Use for Signing both Debug and Production Code |
| HasMember | Allowed | B | 1292 | Incorrect Conversion of Security Identifiers |
| HasMember | Allowed | B | 1293 | Missing Source Correlation of Multiple Independent Data |
| HasMember | Allowed-with-Review | C | 1294 | Insecure Security Identifier Mechanism |
| HasMember | Allowed | B | 1295 | Debug Messages Revealing Unnecessary Information |
| HasMember | Allowed | B | 1296 | Incorrect Chaining or Granularity of Debug Components |
| HasMember | Allowed | B | 1297 | Unprotected Confidential Information on Device is Accessible by OSAT Vendors |
| HasMember | Allowed | B | 1299 | Missing Protection Mechanism for Alternate Hardware Interface |
| HasMember | Allowed | B | 1300 | Improper Protection of Physical Side Channels |
| HasMember | Allowed | B | 1301 | Insufficient or Incomplete Data Removal within Hardware Component |
| HasMember | Allowed | B | 1302 | Missing Source Identifier in Entity Transactions on a System-On-Chip (SOC) |
| HasMember | Allowed | B | 1303 | Non-Transparent Sharing of Microarchitectural Resources |
| HasMember | Allowed | B | 1304 | Improperly Preserved Integrity of Hardware Configuration State During a Power Save/Restore Operation |
| HasMember | Allowed | B | 1310 | Missing Ability to Patch ROM Code |
| HasMember | Allowed | B | 1312 | Missing Protection for Mirrored Regions in On-Chip Fabric Firewall |
| HasMember | Allowed | B | 1313 | Hardware Allows Activation of Test or Debug Logic at Runtime |
| HasMember | Allowed | B | 1314 | Missing Write Protection for Parametric Data Values |
| HasMember | Allowed | B | 1315 | Improper Setting of Bus Controlling Capability in Fabric End-point |
| HasMember | Allowed | B | 1316 | Fabric-Address Map Allows Programming of Unwarranted Overlaps of Protected and Unprotected Ranges |
| HasMember | Allowed | B | 1317 | Improper Access Control in Fabric Bridge |
| HasMember | Allowed | B | 1318 | Missing Support for Security Features in On-chip Fabrics or Buses |
| HasMember | Allowed | B | 1319 | Improper Protection against Electromagnetic Fault Injection (EM-FI) |
| HasMember | Allowed | B | 1320 | Improper Protection for Outbound Error Messages and Alert Signals |
| HasMember | Allowed | B | 1323 | Improper Management of Sensitive Trace Data |
| HasMember | Allowed | B | 1326 | Missing Immutable Root of Trust in Hardware |
| HasMember | Allowed | B | 1327 | Binding to an Unrestricted IP Address |
| HasMember | Allowed | B | 1328 | Security Version Number Mutable to Older Versions |
| HasMember | Allowed | B | 1329 | Reliance on Component That is Not Updateable |
| HasMember | Allowed | V | 1330 | Remanent Data Readable after Memory Erase |
| HasMember | Allowed | B | 1331 | Improper Isolation of Shared Resources in Network On Chip (NoC) |
| HasMember | Allowed | B | 1332 | Improper Handling of Faults that Lead to Instruction Skips |
| HasMember | Allowed | B | 1334 | Unauthorized Error Injection Can Degrade Hardware Redundancy |
| HasMember | Allowed | B | 1335 | Incorrect Bitwise Shift of Integer |
| HasMember | Allowed | B | 1336 | Improper Neutralization of Special Elements Used in a Template Engine |
| HasMember | Allowed | B | 1338 | Improper Protections Against Hardware Overheating |
| HasMember | Allowed | B | 1339 | Insufficient Precision or Accuracy of a Real Number |
| HasMember | Allowed | B | 1341 | Multiple Releases of Same Resource or Handle |
| HasMember | Allowed | B | 1342 | Information Exposure through Microarchitectural State after Transient Execution |
| HasMember | Allowed | B | 1351 | Improper Handling of Hardware Behavior in Exceptionally Cold Environments |
| HasMember | Allowed-with-Review | C | 1391 | Use of Weak Credentials |
| HasMember | Allowed | B | 1392 | Use of Default Credentials |
| HasMember | Allowed | B | 1393 | Use of Default Password |
| HasMember | Allowed | B | 1394 | Use of Default Cryptographic Key |
| HasMember | Allowed-with-Review | C | 1395 | Dependency on Vulnerable Third-Party Component |
| HasMember | Allowed-with-Review | C | 1419 | Incorrect Initialization of Resource |
| HasMember | Allowed-with-Review | B | 1420 | Exposure of Sensitive Information during Transient Execution |
| HasMember | Allowed | B | 1421 | Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution |
| HasMember | Allowed | B | 1422 | Exposure of Sensitive Information caused by Incorrect Data Forwarding during Transient Execution |
| HasMember | Allowed | B | 1423 | Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution |
| HasMember | Allowed | B | 1427 | Improper Neutralization of Input Used for LLM Prompting |
| HasMember | Allowed | B | 1428 | Reliance on HTTP instead of HTTPS |
| HasMember | Allowed-with-Review | C | 405 | Asymmetric Resource Consumption (Amplification) |
| HasMember | Allowed-with-Review | B | 426 | Untrusted Search Path |
| HasMember | Allowed-with-Review | B | 427 | Uncontrolled Search Path Element |
| HasMember | Allowed-with-Review | C | 441 | Unintended Proxy or Intermediary ('Confused Deputy') |
| HasMember | Discouraged | P | 707 | Improper Neutralization |