CVE-2018-3693

—

CVSS 3.1

5.6 medium

EPSS

9%p95

Published

Jul 10, 2018 (Jul 10, 2018)

Modified

Jun 17, 2026

Description

Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a speculative buffer overflow and side-channel analysis.

Vendors: intel arm oracle schneider-electric netapp redhat fujitsu
Products: atom c, atom e, atom x3, atom z, celeron j, celeron n, core i3, core i5, core i7, core m, core m3, core m5
Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (8.6%)

In the news2 stories

Two New Spectre-Class CPU Flaws Discovered—Intel Pays $100K Bounty

The Hacker NewsJul 11, 11:45 UTC · Jul 11, 2018Vulnerability CVE-2017-5753 CVE-2018-3693 CVE-2017-5715+1 CVEs

Intel pays a $100K bug bounty for the new CPU Spectre 1.1 flaw

Security AffairsJul 11, 17:18 UTC · Jul 11, 2018Vulnerability CVE-2017-5753 CVE-2018-3693 CVE-2017-5715+1 CVEs