CVE-2018-3639

Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are…

Medium · published May 22, 2018

Patch now

High probability of exploitation

CVSS calls it medium at 5.5. It sits in the 99.1th percentile for exploit probability.

CVSS v3.1
5.5
EPSS
61%
Percentile
99.1
In the wild
Unconfirmed
What it is

Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka Speculative Store Bypass (SSB), Variant 4.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.60631 · 99.1th percentile
Published
2018-05-22T12:00Z
EPSS history
Timeline
  • 22 MAY 12:00Z
    Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are…
    cvelistv5