CWE-1421Base

Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution

Incomplete in the CWE catalog · 3 CVEs mapped

3
CVEs mapped
5.6
Median CVSS
What it is

A processor event may allow transient operations to access

architecturally restricted data (for example, in another address

space) in a shared microarchitectural structure (for example, a CPU

cache), potentially exposing the data over a covert channel.

Recent examples
5.6cvss
CVE-2024-36357

A transient execution vulnerability in some AMD processors may allow an attacker to infer data in the L1D cache, potentially resulting in the leakage of…

A transient execution vulnerability in some AMD processors may allow an attacker to infer data in the L1D cache, potentially resulting in the leakage of sensitive information across privileged boundaries.

MEDIUMno explanation yet
0%
epss
5.6cvss
CVE-2024-36350

A transient execution vulnerability in some AMD processors may allow an attacker to infer data from previous stores, potentially resulting in the leakage of…

A transient execution vulnerability in some AMD processors may allow an attacker to infer data from previous stores, potentially resulting in the leakage of privileged information.

MEDIUMno explanation yet
0%
epss
6.7cvss
CVE-2024-38296

Dell Edge Gateway 3200, versions prior to 15.40.30.2879, and Edge Gateway 5200, versions prior to 12.0.94.2380, contain an Exposure of Sensitive Information in…

Dell Edge Gateway 3200, versions prior to 15.40.30.2879, and Edge Gateway 5200, versions prior to 12.0.94.2380, contain an Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to information exposure.

MEDIUMno explanation yet
0%
epss
The record
Technical detail
CWE ID
CWE-1421
Abstraction
Base
Structure
Simple
Status
Incomplete
References (15)