QSearchQSearch

CVE-2017-5753

5.6 MEDIUM

Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an...

Published: 2018-01-04 · Last updated: 2026-05-28

Severity and scoring

CVSS
5.6 MEDIUM
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
CWE
CWE-203

Affected products

VendorProduct
armatom_c, atom_e, atom_x3
canonicalatom_c, atom_e, atom_x3
debianatom_c, atom_e, atom_x3
intelatom_c, atom_e, atom_x3
netappatom_c, atom_e, atom_x3
opensuseatom_c, atom_e, atom_x3
oracleatom_c, atom_e, atom_x3
pepperl-fuchsatom_c, atom_e, atom_x3
phoenixcontactatom_c, atom_e, atom_x3
siemensatom_c, atom_e, atom_x3
suseatom_c, atom_e, atom_x3
synologyatom_c, atom_e, atom_x3
vmwareatom_c, atom_e, atom_x3

Description

Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.

Source: NVD

References

Related CVEs

Same vendor

  • CVE-2026-41856 — The Spring GraphQL annotation detection mechanism for @Controller data fetchers may not correctly resolve annotations on methods within t... (7.5 HIGH)
  • CVE-2026-41700 — Spring for GraphQL applications that have enabled the WebSocket transport are vulnerable to Cross-Site WebSocket Hijacking (8.1 HIGH)
  • CVE-2026-41699 — Spring for GraphQL applications are vulnerable to Unsafe Deserialization when processing paginated GraphQL queries (8.1 HIGH)
  • CVE-2026-35273 — Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Updates Environment Management) (9.8 CRITICAL)
  • CVE-2026-41694 — Since Spring Security SAML decrypts SAML Responses as well as elements of SAML LogoutRequests and LogoutResponses without requiring a val... (3.7 LOW)

Same CWE

  • CVE-2026-11289 — Side-channel information leakage in Paint in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via... (6.5 MEDIUM)
  • CVE-2026-11284 — Side-channel information leakage in PerformanceAPIs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origi... (6.5 MEDIUM)
  • CVE-2026-45294 — FreeScout is a free help desk and shared inbox built with PHP's Laravel framework (5.3 MEDIUM)
  • CVE-2026-45410 — TREK is a collaborative travel planner (5.3 MEDIUM)
  • CVE-2025-11145 — Observable Discrepancy, Exposure of Sensitive Information to an Unauthorized Actor, Exposure of Private Personal Information to an Unauth... (7.5 HIGH)