CVE Watch14 oct 2026

CVE-2023-28746

Information exposure through microarchitectural state after transient execution from some register files for some Intel(R) Atom(R) Processor

CVSS

6.5

Medio

EPSS

0.5%

p46

KEV

—

Exploit Today

0-100

Publicado: 14 mar 2024 · Última mod.: 14 oct 2026 · CWE-1342

EPSS · 30d

0.5%EPSS · 30 días0.5%

2026-10-042026-10-31

Descripción técnica

Information exposure through microarchitectural state after transient execution from some register files for some Intel(R) Atom(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

Referencias oficiales

www.openwall.comhttp://www.openwall.com/lists/oss-security/2024/03/12/13
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2024/05/msg00003.html
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2024/06/msg00017.html
lists.fedoraproject.orghttps://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EIUICU6CVJUIB6BPJ7P5QTPQR5VOBHFK/
lists.fedoraproject.orghttps://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/H63LGAQXPEVJOES73U4XK65I6DASOAAG/
lists.fedoraproject.orghttps://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZON4TLXG7TG4A2XZG563JMVTGQW4SF3A/
www.intel.comhttps://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00898.html
www.openwall.comhttp://www.openwall.com/lists/oss-security/2024/03/12/13
xenbits.xen.orghttp://xenbits.xen.org/xsa/advisory-452.html
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2024/05/msg00003.html
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2024/06/msg00017.html
lists.fedoraproject.orghttps://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EIUICU6CVJUIB6BPJ7P5QTPQR5VOBHFK/
lists.fedoraproject.orghttps://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/H63LGAQXPEVJOES73U4XK65I6DASOAAG/
lists.fedoraproject.orghttps://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZON4TLXG7TG4A2XZG563JMVTGQW4SF3A/
www.intel.comhttps://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00898.html
cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-265688.html

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-18796—

1.0%

——0Any application that uses external QSPI flash for encrypted XIP on nRF5340 and relies on that encryption for confidentiality and/or integrity of the externally stored code. No specific nRF Connect SDK version is the root cause; the weakness is in the on-the-fly decryption scheme.53d