VULNERABILITY INTELLIGENCE
CVE-2018-3646
CVSS score5.6 MEDIUM
EPSS probability8.10%
CISA KEVNot currently listed
Published2018-08-14
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
Description
Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data cache to an attacker with local user access with guest OS privilege via a terminal page fault and a side-channel analysis.
Weakness classification
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
Primary references
- secure@intel.com — Third Party Advisory
- secure@intel.com — Third Party Advisory
- secure@intel.com — Third Party Advisory, VDB Entry
- secure@intel.com — Third Party Advisory, VDB Entry
- secure@intel.com
- secure@intel.com — Third Party Advisory
- secure@intel.com — Third Party Advisory
- secure@intel.com — Third Party Advisory
- secure@intel.com — Third Party Advisory
- secure@intel.com — Third Party Advisory
- secure@intel.com — Third Party Advisory
- secure@intel.com — Third Party Advisory