Meet 'Meltdown' and 'Spectre,' the chip flaws causing problems for nearly everyone
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2017-5717 | Type Confusion in Content Protection HECI Service in Intel Graphics Driver allows unprivileged user to elevate privileges via local access | 7.8 | 1% | ||
CVE-2017-5753+1 related CVE | Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local… | 5.6 | 94% | PoC |
From the original article
3 min read at cyberscoop.com
Most people are impacted by the vulnerabilities. It's also not clear if the exploits have been used in the wild because neither leave any traces in log files. Critical bugs in all modern processor chips that allow attackers to potentially steal sensitive data were publicly revealed Wednesday after months of private security industry work and days of public speculation .
By @HowellONeill · cyberscoop.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.