CVE-2023-38575 MEDIUM

CVE-2023-38575

Vendor N/A

Product Intel(R) Processors

Weakness CWE-1303

Published March 14, 2024

Last update February 13, 2025

View on NVD All CVEs

CVSS base score

5.5/10

Attack vector Local

Attack complexity Low

Privileges required Low

User interaction None

Confidentiality High

Integrity None

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

What the vulnerability does

01Description

Non-transparent sharing of return predictor targets between contexts in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access.

Key dates

02Disclosure timeline

March 14, 2024 CVE published

February 13, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2023-38575 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/1303.html

Related vulnerabilities

CVE-2023-38575

01Description

02Disclosure timeline

03References

04Related CVE