CVE-2018-3640

—

CVSS 3.0

5.6 medium

EPSS

8%p94

Published

May 22, 2018 (May 22, 2018)

Modified

Jun 17, 2026

Description

Systems with microprocessors utilizing speculative execution and that perform speculative reads of system registers may allow unauthorized disclosure of system parameters to an attacker with local user access via a side-channel analysis, aka Rogue System Register Read (RSRE), Variant 3a.

Vendors: intel arm
Products: atom c, atom e, atom z, celeron j, celeron n, core i3, core i5, core i7, core m, pentium, pentium j, pentium silver
Weakness: CWE-203
Vector: CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (7.6%)

In the news2 stories

Oracle issued security patches for recently discovered Spectre and Meltdown issues

Security AffairsJun 25, 13:40 UTC · Jun 25, 2018Vulnerability CVE-2018-3639 CVE-2018-3640

New Spectre-like flaw found in CPUs using speculative execution

Help Net SecurityMay 22, 00:00 UTC · May 22, 2018Vulnerability CVE-2018-3639 CVE-2018-3640