VULNERABILITY INTELLIGENCE
CVE-2018-3639
CVSS score5.5 MEDIUM
EPSS probability60.63%
CISA KEVNot currently listed
Published2018-05-22
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Description
Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka Speculative Store Bypass (SSB), Variant 4.
Weakness classification
- CWE-203: Observable Discrepancy
Primary references
- secure@intel.com — Broken Link
- secure@intel.com — Broken Link
- secure@intel.com — Broken Link
- secure@intel.com — Third Party Advisory
- secure@intel.com — Third Party Advisory
- secure@intel.com — Mailing List, Third Party Advisory
- secure@intel.com — Mailing List, Third Party Advisory
- secure@intel.com — Mailing List, Third Party Advisory
- secure@intel.com — Third Party Advisory, VDB Entry
- secure@intel.com — Third Party Advisory, VDB Entry
- secure@intel.com — Third Party Advisory, VDB Entry
- secure@intel.com — Third Party Advisory