CVE-2022-40982

PoC ×2—

CVSS 3.1

6.5 medium

EPSS

3%p87

Published

Aug 11, 2023 (Aug 11, 2023)

Modified

Jun 17, 2026

Description

Information exposure through microarchitectural state after transient execution in certain vector execution units for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

Vendors: redhat xen intel debian netapp
Products: enterprise linux, xen, microcode, xeon e-2314 firmware, xeon e-2324g firmware, xeon e-2334 firmware, xeon e-2374g firmware, xeon e-2336 firmware, xeon e-2356g firmware, xeon e-2386g firmware, xeon e-2378 firmware, xeon e-2378g firmware
Weakness: CWE-1342, CWE-203
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (3.0%)

In the news7 stories

Recapping the top stories from Black Hat and DEF CON

Cisco TalosAug 17, 18:00 UTC · Aug 17, 2023Ransomware CVE-2022-40982

60

Week in review: 8 free cybersecurity docus, vulnerable Intel Core processors, Black Hat USA 2023

Help Net SecurityAug 13, 00:00 UTC · Aug 13, 2023Ransomware CVE-2023-39143 CVE-2023-38180 CVE-2022-40982

60

Collide+Power, Downfall, and Inception: New Side

The Hacker NewsAug 10, 08:33 UTC · Aug 10, 2023Vulnerability CVE-2023-20583 CVE-2022-40982 CVE-2023-20569+3 CVEs

60

Intel patches high-severity vulnerability affecting central processing units

The RecordNov 15, 15:33 UTC · Nov 15, 2023Vulnerability CVE-2023-23583 CVE-2022-40982 CVE-2023-20593

47

iLeakage: New Safari Exploit Impacts Apple iPhones and Macs with A- and M

The Hacker NewsNov 1, 08:32 UTC · Nov 1, 2023Vulnerability CVE-2023-20583 CVE-2022-40982 CVE-2023-20569

35

Downfall Intel CPU side

Security AffairsAug 9, 08:06 UTC · Aug 9, 2023Vulnerability CVE-2022-40982

35

Downfall attacks can gather passwords, encryption keys from Intel processors

Help Net SecurityAug 9, 00:00 UTC · Aug 9, 2023Vulnerability CVE-2022-40982 CVE-2023-20593 CVE-2023-20569

35