CVE-2017-5754

Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker…

Medium · published January 4, 2018

Patch now

High probability of exploitation

CVSS calls it medium at 5.6. It sits in the 99.7th percentile for exploit probability.

CVSS v3.1
5.6
EPSS
84%
Percentile
99.7
In the wild
Unconfirmed
What it is

Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis of the data cache.

The record
Technical detail
CVSS v3.1
5.6 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.84172 · 99.7th percentile
Published
2018-01-04T13:00Z
EPSS history
Timeline
  • 04 JAN 13:00Z
    Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker…
    cvelistv5