QSearchQSearch

CVE-2018-3620

5.6 MEDIUM

Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information re...

Published: 2018-08-14 · Last updated: 2026-05-29

Severity and scoring

CVSS
5.6 MEDIUM
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
CWE
CWE-203

Affected products

VendorProduct
intelcore_i3, core_i5, core_i7

Description

Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data cache to an attacker with local user access via a terminal page fault and a side-channel analysis.

Source: NVD

References

Related CVEs

Same vendor

  • CVE-2019-11135 — TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may allow an authenticated user to potentially enable infor... (6.5 MEDIUM)
  • CVE-2019-11091 — Microarchitectural Data Sampling Uncacheable Memory (MDSUM): Uncacheable memory on some microprocessors utilizing speculative execution m... (5.6 MEDIUM)
  • CVE-2018-12130 — Microarchitectural Fill Buffer Data Sampling (MFBDS): Fill buffers on some microprocessors utilizing speculative execution may allow an a... (5.9 MEDIUM)
  • CVE-2018-12127 — Microarchitectural Load Port Data Sampling (MLPDS): Load ports on some microprocessors utilizing speculative execution may allow an authe... (5.6 MEDIUM)
  • CVE-2018-12126 — Microarchitectural Store Buffer Data Sampling (MSBDS): Store buffers on some microprocessors utilizing speculative execution may allow an... (5.6 MEDIUM)

Same CWE

  • CVE-2026-11289 — Side-channel information leakage in Paint in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via... (6.5 MEDIUM)
  • CVE-2026-11284 — Side-channel information leakage in PerformanceAPIs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origi... (6.5 MEDIUM)
  • CVE-2026-45294 — FreeScout is a free help desk and shared inbox built with PHP's Laravel framework (5.3 MEDIUM)
  • CVE-2026-45410 — TREK is a collaborative travel planner (5.3 MEDIUM)
  • CVE-2025-11145 — Observable Discrepancy, Exposure of Sensitive Information to an Unauthorized Actor, Exposure of Private Personal Information to an Unauth... (7.5 HIGH)