CVE WatchOct 14, 2026

CVE-2023-28746

Information exposure through microarchitectural state after transient execution from some register files for some Intel(R) Atom(R) Processor

CVSS

6.5

Medium

EPSS

0.5%

p46

KEV

—

Exploit Today

0-100

Published: Mar 14, 2024 · Last modified: Oct 14, 2026 · CWE-1342

EPSS · 30d

0.5%EPSS · 30 days0.5%

2026-10-042026-10-31

Technical description

Information exposure through microarchitectural state after transient execution from some register files for some Intel(R) Atom(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

Official references

www.openwall.comhttp://www.openwall.com/lists/oss-security/2024/03/12/13
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2024/05/msg00003.html
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2024/06/msg00017.html
lists.fedoraproject.orghttps://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EIUICU6CVJUIB6BPJ7P5QTPQR5VOBHFK/
lists.fedoraproject.orghttps://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/H63LGAQXPEVJOES73U4XK65I6DASOAAG/
lists.fedoraproject.orghttps://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZON4TLXG7TG4A2XZG563JMVTGQW4SF3A/
www.intel.comhttps://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00898.html
www.openwall.comhttp://www.openwall.com/lists/oss-security/2024/03/12/13
xenbits.xen.orghttp://xenbits.xen.org/xsa/advisory-452.html
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2024/05/msg00003.html
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2024/06/msg00017.html
lists.fedoraproject.orghttps://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EIUICU6CVJUIB6BPJ7P5QTPQR5VOBHFK/
lists.fedoraproject.orghttps://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/H63LGAQXPEVJOES73U4XK65I6DASOAAG/
lists.fedoraproject.orghttps://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZON4TLXG7TG4A2XZG563JMVTGQW4SF3A/
www.intel.comhttps://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00898.html
cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-265688.html

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-18796—

1.0%

——0Any application that uses external QSPI flash for encrypted XIP on nRF5340 and relies on that encryption for confidentiality and/or integrity of the externally stored code. No specific nRF Connect SDK version is the root cause; the weakness is in the on-the-fly decryption scheme.53d