CVE-2017-5715

PoC —

CVSS 3.1

5.6 medium

EPSS

74%p99

Published

Jan 4, 2018 (Jan 4, 2018)

Modified

Jun 17, 2026

Description

Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.

Vendors: intel arm canonical netapp siemens debian oracle
Products: atom c, atom e, atom x3, atom x5-e3930, atom x5-e3940, atom x7-e3950, atom z, celeron j, celeron n, core i3, core i5, core i7
Weakness: CWE-203
Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (74.0%)

In the news20 stories

New Research Reveals Spectre Vulnerability Persists in Latest AMD and Intel Processors

The Hacker NewsOct 29, 05:53 UTC · Oct 29, 2024Vulnerability CVE-2017-5715 CVE-2023-38575 CVE-2022-23824

60

Threat Brief: Meltdown and Spectre Vulnerabilities

Palo Alto Unit 42Jan 28, 21:27 UTC · Jan 28, 2022Vulnerability CVE-2017-5753 CVE-2017-5715 CVE-2017-5754

60

Intel Admits It Won't Be Possible to Fix Spectre (V2) Flaw in Some Processors

The Hacker NewsApr 5, 14:46 UTC · Apr 5, 2018Vulnerability CVE-2017-5715

60

Microsoft rushes Windows patch disabling Intel’s Spectre fixes due to instability

CyberScoopJan 29, 18:02 UTC · Jan 29, 2018Vulnerability in the wildCVE-2017-5754 CVE-2017-5753 CVE-2017-5715

60

Week in review: Intel testing new Spectre fixes, ICO protection, cybercrooks abusing travel industry

Help Net SecurityJan 28, 00:00 UTC · Jan 28, 2018Ransomware CVE-2017-5715

60

Oracle issues patches for 10 'virtual machine escape' flaws in VirtualBox

CyberScoopJan 26, 19:06 UTC · Jan 26, 2018Vulnerability in the wildCVE-2018-2698 CVE-2018-2694 CVE-2017-5753+2 CVEs

60

Oracle January 2018 Critical Patch Update also addresses Spectre and Meltdown

Security AffairsJan 17, 15:06 UTC · Jan 17, 2018Vulnerability CVE-2017-5753 CVE-2017-5715 CVE-2017-5754+1 CVEs

60

Meltdown and Spectre

Cisco TalosJan 8, 17:16 UTC · Jan 8, 2018Exploit / PoC in the wildCVE-2017-5754 CVE-2017-5715 CVE-2017-5753

60

Spook.Js attack allows to bypass Google Chrome Site Isolation protections

Security AffairsSep 13, 15:26 UTC · Sep 13, 2021Exploit / PoC CVE-2017-5754 CVE-2017-5753 CVE-2017-5715

50

2 Linux Kernel flaws that can allow bypassing Spectre mitigations

Security AffairsMar 30, 14:46 UTC · Mar 30, 2021Exploit / PoC CVE-2017-5754 CVE-2017-5753 CVE-2017-5715+2 CVEs

50

Google releases Spectre PoC code exploit for Chrome browser

Security AffairsMar 14, 09:52 UTC · Mar 14, 2021Exploit / PoC CVE-2017-5754 CVE-2017-5753 CVE-2017-5715

50

Boffins discovered seven new Meltdown and Spectre attacks

Security AffairsNov 14, 22:58 UTC · Nov 14, 2018Exploit / PoC CVE-2017-5754 CVE-2017-5753 CVE-2017-5715

50

Experts propose a new variation of the Spectre attack to recover data from System Management Mode

Security AffairsMay 20, 07:39 UTC · May 20, 2018Exploit / PoC CVE-2017-5753 CVE-2017-5715

50

AMD and Microsoft release microcode and operating system updates against Spectre flaw

Security AffairsApr 11, 10:52 UTC · Apr 11, 2018Exploit / PoC CVE-2017-5754 CVE-2017-5753 CVE-2017-5715

50

Two New Spectre-Class CPU Flaws Discovered—Intel Pays $100K Bounty

The Hacker NewsJul 11, 11:45 UTC · Jul 11, 2018Vulnerability CVE-2017-5753 CVE-2018-3693 CVE-2017-5715+1 CVEs

47

New Spectre (Variant 4) CPU Flaw Discovered—Intel, ARM, AMD Affected

The Hacker NewsMay 22, 08:27 UTC · May 22, 2018Vulnerability CVE-2017-5753 CVE-2017-5715 CVE-2017-5754+1 CVEs

47

Week in review: Emergency alert systems easily hacked, the cost of GDPR compliance

Help Net SecurityApr 15, 00:00 UTC · Apr 15, 2018Policy & legal CVE-2017-5715

47

Cybersecurity week Round-Up (2018, Week 3) -Let's summarize the most important event occurred last week in 3 minutes.

Security AffairsJan 27, 17:57 UTC · Jan 27, 2018Vulnerability CVE-2017-5715

47

Meltdown and Spectre: Data theft hardware bugs affect most modern CPUs

Help Net SecurityApr 20, 09:32 UTC · Apr 20, 2026Vulnerability CVE-2017-5754 CVE-2017-5753 CVE-2017-5715

35

New Intel CPU Vulnerability 'Indirector' Exposes Sensitive Data

The Hacker NewsJul 3, 06:52 UTC · Jul 3, 2024Vulnerability CVE-2017-5715

35