CWE-1342Base

Information Exposure through Microarchitectural State after Transient Execution

Incomplete in the CWE catalog · 3 CVEs mapped

3
CVEs mapped
6.5
Median CVSS
What it is

The processor does not properly clear microarchitectural state after incorrect microcode assists or speculative execution, resulting in transient execution.

Recent examples
—none
CVE-2026-18796

CVE-2026-18796 - UNKNOWN Severity Vulnerability

Any application that uses external QSPI flash for encrypted XIP on nRF5340 and relies on that encryption for confidentiality and/or integrity of the externally stored code. No specific nRF Connect SDK version is the root cause; the weakness is in the on-the-fly decryption scheme.

no explanation yet
0%
epss
6.5cvss
CVE-2023-28746

CVE-2023-28746 - MEDIUM Severity Vulnerability

Information exposure through microarchitectural state after transient execution from some register files for some Intel(R) Atom(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

MEDIUMno explanation yet
1%
epss
6.5cvss
CVE-2022-40982

Information exposure through microarchitectural state after transient execution in certain vector execution units for some Intel(R) Processors may allow an…

Information exposure through microarchitectural state after transient execution in certain vector execution units for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

MEDIUMno explanation yet
3%
epss
The record
Technical detail
CWE ID
CWE-1342
Abstraction
Base
Structure
Simple
Status
Incomplete
References (4)