60
CVE-2018-3620
- CVSS 3.1
- 5.6 medium
- EPSS
- 6%p92
- Published
- ·
- Modified
Description · NVD
Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data cache to an attacker with local user access via a terminal page fault and a side-channel analysis.
- Vendors
- intel
- Products
- core i3, core i5, core i7, core m, core m3, core m5, core m7, xeon
- Weakness
- CWE-203
- Vector
- CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
In the news
4 stories35
35
58 hardware vulnerabilities: A guide to the threats
CSO Online reference guide catalogs 58 CPU and DRAM hardware vulnerabilities from Spectre and Meltdown onward, covering side-channel flaws and mitigation limits.
18