CVE-2017-5753

PoC —

CVSS 3.1

5.6 medium

EPSS

94%p100

Published

Jan 4, 2018 (Jan 4, 2018)

Modified

Jun 17, 2026

Description

Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.

Vendors: intel canonical debian oracle synology opensuse suse arm pepperl-fuchs netapp phoenixcontact siemens
Products: atom c, atom e, atom x3, atom x5-e3930, atom x5-e3940, atom x7-e3950, atom z, celeron j, celeron n, core i3, core i5, core i7
Weakness: CWE-203
Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (93.8%)

In the news20 stories

GhostRace – New Data Leak Vulnerability Affects Modern CPUs

The Hacker NewsMar 18, 05:47 UTC · Mar 18, 2024Vulnerability CVE-2024-2193 CVE-2017-5753

60

Threat Brief: Meltdown and Spectre Vulnerabilities

Palo Alto Unit 42Jan 28, 21:27 UTC · Jan 28, 2022Vulnerability CVE-2017-5753 CVE-2017-5715 CVE-2017-5754

60

Microsoft rushes Windows patch disabling Intel’s Spectre fixes due to instability

CyberScoopJan 29, 18:02 UTC · Jan 29, 2018Vulnerability in the wildCVE-2017-5754 CVE-2017-5753 CVE-2017-5715

60

Oracle issues patches for 10 'virtual machine escape' flaws in VirtualBox

CyberScoopJan 26, 19:06 UTC · Jan 26, 2018Vulnerability in the wildCVE-2018-2698 CVE-2018-2694 CVE-2017-5753+2 CVEs

60

Oracle January 2018 Critical Patch Update also addresses Spectre and Meltdown

Security AffairsJan 17, 15:06 UTC · Jan 17, 2018Vulnerability CVE-2017-5753 CVE-2017-5715 CVE-2017-5754+1 CVEs

60

Meltdown and Spectre

Cisco TalosJan 8, 17:16 UTC · Jan 8, 2018Exploit / PoC in the wildCVE-2017-5754 CVE-2017-5715 CVE-2017-5753

60

Meet 'Meltdown' and 'Spectre,' the chip flaws causing problems for nearly everyone

CyberScoopJan 3, 22:52 UTC · Jan 3, 2018Exploit / PoC in the wildCVE-2017-5753 CVE-2017-5717 CVE-2017-5754

60

Spook.Js attack allows to bypass Google Chrome Site Isolation protections

Security AffairsSep 13, 15:26 UTC · Sep 13, 2021Exploit / PoC CVE-2017-5754 CVE-2017-5753 CVE-2017-5715

50

2 Linux Kernel flaws that can allow bypassing Spectre mitigations

Security AffairsMar 30, 14:46 UTC · Mar 30, 2021Exploit / PoC CVE-2017-5754 CVE-2017-5753 CVE-2017-5715+2 CVEs

50

Google releases Spectre PoC code exploit for Chrome browser

Security AffairsMar 14, 09:52 UTC · Mar 14, 2021Exploit / PoC CVE-2017-5754 CVE-2017-5753 CVE-2017-5715

50

Boffins discovered seven new Meltdown and Spectre attacks

Security AffairsNov 14, 22:58 UTC · Nov 14, 2018Exploit / PoC CVE-2017-5754 CVE-2017-5753 CVE-2017-5715

50

Experts propose a new variation of the Spectre attack to recover data from System Management Mode

Security AffairsMay 20, 07:39 UTC · May 20, 2018Exploit / PoC CVE-2017-5753 CVE-2017-5715

50

AMD and Microsoft release microcode and operating system updates against Spectre flaw

Security AffairsApr 11, 10:52 UTC · Apr 11, 2018Exploit / PoC CVE-2017-5754 CVE-2017-5753 CVE-2017-5715

50

NetSpectre — New Remote Spectre Attack Steals Data Over the Network

The Hacker NewsJul 27, 08:42 UTC · Jul 27, 2018Vulnerability CVE-2017-5753

47

Two New Spectre-Class CPU Flaws Discovered—Intel Pays $100K Bounty

The Hacker NewsJul 11, 11:45 UTC · Jul 11, 2018Vulnerability CVE-2017-5753 CVE-2018-3693 CVE-2017-5715+1 CVEs

47

New Spectre (Variant 4) CPU Flaw Discovered—Intel, ARM, AMD Affected

The Hacker NewsMay 22, 08:27 UTC · May 22, 2018Vulnerability CVE-2017-5753 CVE-2017-5715 CVE-2017-5754+1 CVEs

47

Meltdown and Spectre: Data theft hardware bugs affect most modern CPUs

Help Net SecurityApr 20, 09:32 UTC · Apr 20, 2026Vulnerability CVE-2017-5754 CVE-2017-5753 CVE-2017-5715

35

New SpookJS Attack Bypasses Google Chrome’s Site Isolation Protection

The Hacker NewsSep 15, 00:00 UTC · Sep 15, 2021Vulnerability CVE-2017-5753 CVE-2017-5715

35

Microsoft enabled Retpoline mitigations against the Spectre Variant 2

Security AffairsMar 5, 07:44 UTC · Mar 5, 2019Vulnerability CVE-2017-5754 CVE-2017-5753 CVE-2017-57152

35

NetSpectre is a remote Spectre attack that allows stealing data over the network

Security AffairsJul 27, 18:53 UTC · Jul 27, 2018Vulnerability CVE-2017-5753

35