CVE-2017-5754

—

CVSS 3.1

5.6 medium

EPSS

84%p100

Published

Jan 4, 2018 (Jan 4, 2018)

Modified

Jun 17, 2026

Description

Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis of the data cache.

Vendors: intel arm
Products: atom c, atom e, atom x3, atom z, celeron j, celeron n, core i3, core i5, core i7, core m, core m3, core m5
Weakness: CWE-200
Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (84.2%)

In the news20 stories

Threat Brief: Meltdown and Spectre Vulnerabilities

Palo Alto Unit 42Jan 28, 21:27 UTC · Jan 28, 2022Vulnerability CVE-2017-5753 CVE-2017-5715 CVE-2017-5754

60

Microsoft rushes Windows patch disabling Intel’s Spectre fixes due to instability

CyberScoopJan 29, 18:02 UTC · Jan 29, 2018Vulnerability in the wildCVE-2017-5754 CVE-2017-5753 CVE-2017-5715

60

Oracle issues patches for 10 'virtual machine escape' flaws in VirtualBox

CyberScoopJan 26, 19:06 UTC · Jan 26, 2018Vulnerability in the wildCVE-2018-2698 CVE-2018-2694 CVE-2017-5753+2 CVEs

60

Oracle January 2018 Critical Patch Update also addresses Spectre and Meltdown

Security AffairsJan 17, 15:06 UTC · Jan 17, 2018Vulnerability CVE-2017-5753 CVE-2017-5715 CVE-2017-5754+1 CVEs

60

Meltdown and Spectre

Cisco TalosJan 8, 17:16 UTC · Jan 8, 2018Exploit / PoC in the wildCVE-2017-5754 CVE-2017-5715 CVE-2017-5753

60

Meet 'Meltdown' and 'Spectre,' the chip flaws causing problems for nearly everyone

CyberScoopJan 3, 22:52 UTC · Jan 3, 2018Exploit / PoC in the wildCVE-2017-5753 CVE-2017-5717 CVE-2017-5754

60

Spook.Js attack allows to bypass Google Chrome Site Isolation protections

Security AffairsSep 13, 15:26 UTC · Sep 13, 2021Exploit / PoC CVE-2017-5754 CVE-2017-5753 CVE-2017-5715

50

2 Linux Kernel flaws that can allow bypassing Spectre mitigations

Security AffairsMar 30, 14:46 UTC · Mar 30, 2021Exploit / PoC CVE-2017-5754 CVE-2017-5753 CVE-2017-5715+2 CVEs

50

Google releases Spectre PoC code exploit for Chrome browser

Security AffairsMar 14, 09:52 UTC · Mar 14, 2021Exploit / PoC CVE-2017-5754 CVE-2017-5753 CVE-2017-5715

50

Boffins discovered seven new Meltdown and Spectre attacks

Security AffairsNov 14, 22:58 UTC · Nov 14, 2018Exploit / PoC CVE-2017-5754 CVE-2017-5753 CVE-2017-5715

50

AMD and Microsoft release microcode and operating system updates against Spectre flaw

Security AffairsApr 11, 10:52 UTC · Apr 11, 2018Exploit / PoC CVE-2017-5754 CVE-2017-5753 CVE-2017-5715

50

Two New Spectre-Class CPU Flaws Discovered—Intel Pays $100K Bounty

The Hacker NewsJul 11, 11:45 UTC · Jul 11, 2018Vulnerability CVE-2017-5753 CVE-2018-3693 CVE-2017-5715+1 CVEs

47

New Spectre (Variant 4) CPU Flaw Discovered—Intel, ARM, AMD Affected

The Hacker NewsMay 22, 08:27 UTC · May 22, 2018Vulnerability CVE-2017-5753 CVE-2017-5715 CVE-2017-5754+1 CVEs

47

Meltdown and Spectre: Data theft hardware bugs affect most modern CPUs

Help Net SecurityApr 20, 09:32 UTC · Apr 20, 2026Vulnerability CVE-2017-5754 CVE-2017-5753 CVE-2017-5715

35

Microsoft enabled Retpoline mitigations against the Spectre Variant 2

Security AffairsMar 5, 07:44 UTC · Mar 5, 2019Vulnerability CVE-2017-5754 CVE-2017-5753 CVE-2017-57152

35

Intel pays a $100K bug bounty for the new CPU Spectre 1.1 flaw

Security AffairsJul 11, 17:18 UTC · Jul 11, 2018Vulnerability CVE-2017-5753 CVE-2018-3693 CVE-2017-5715+1 CVEs

35

Tech giants are all working on new Spectre and Meltdown attacks, so

Security AffairsMay 22, 08:04 UTC · May 22, 2018Vulnerability CVE-2017-5754 CVE-2017-5753 CVE-2017-5715+1 CVEs

35

Meltdown patch made the headlines again, it can be bypassed in Windows 10

Security AffairsMay 4, 07:50 UTC · May 4, 2018Vulnerability CVE-2017-5754

35

Google is distributing more Meltdown and Spectre Patches for Chrome OS devices

Security AffairsMar 22, 18:27 UTC · Mar 22, 2018Vulnerability CVE-2017-5754 CVE-2017-5753 CVE-2017-5715

35

New Intel processors to have hardware-based protections against Meltdown, Spectre 2

Help Net SecurityMar 19, 00:00 UTC · Mar 19, 2018Vulnerability CVE-2017-5754 CVE-2017-5715

35