Search/CVE-2017-5715
● CVE — Medium

CVE-2017-5715

VendorintelProductatom c, atom e, atom x3, atom x5-e3930, atom x5-e3940, atom x7-e3950, atom z, celeron j, celeron n, core i3, core i5, core i7, core m, core m3, core m5, core m7, pentium j, pentium n, xeon, xeon bronze 3104, xeon bronze 3106, xeon e-1105c, xeon e3, xeon e3 1105c v2, xeon e3 1125cDiscoveredJan 4, 2018UpdatedMay 6, 2025

Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.

View graph Watch Export
CVSS v3.1
5.6 MEDIUM
EPSS
73.2%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
20
sources referencing this CVE
Related IOCs
6
seen in the same coverage
EPSS Trend
Aug 16, 2026 → Oct 26, 2026
▼ 0.96pp
74.2% → 73.2% over 3 tracked changes
CVSS v3.1 Detail
Attack VectorLOCAL
Attack ComplexityHIGH
Privileges RequiredLOW
User InteractionNONE
ScopeCHANGED
ConfidentialityHIGH
IntegrityNONE
AvailabilityNONE
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
Connections
46 relationships
Timeline
disclosure → media coverage
Jan 4, 2018
Disclosure — published as a CVE record. · last revised by NVD May 6, 2025
Aug 11, 2025
aws.amazon.com reports: Amazon EC2 defenses against L1TF Reloaded
Aug 20, 2025
kaspersky.com reports: Retbleed exploitation in realistic setting | Kaspersky official blog
Aug 24, 2025
go.theregister.com reports: Bug bounties: The good, the bad, and the frankly ridiculous ways to do it
Sep 11, 2025
go.theregister.com reports: Spectre haunts CPUs again: VMSCAPE vulnerability leaks cloud secrets
Sep 11, 2025
bleepingcomputer.com reports: New VMScape attack breaks guest-host isolation on AMD, Intel CPUs
Sep 12, 2025
securityweek.com reports: VMScape: Academics Break Cloud Isolation With New Spectre Attack
Sep 16, 2025
securityweek.com reports: Rowhammer Attack Demonstrated Against DDR5
Sep 22, 2025
securityweek.com reports: Researchers Earn $150,000 for L1TF Exploit Leaking Data From Public Cloud
Sep 22, 2025
kaspersky.com reports: VMScape attack | Kaspersky official blog
Sep 30, 2025
thehackernews.com reports: $50 Battering RAM Attack Breaks Intel and AMD Cloud Security Protections
Oct 10, 2025
helpnetsecurity.com reports: From theory to training: Lessons in making NICE usable
Oct 19, 2025
redhotcyber.com reports: Intel rilascia patch urgenti per la nuova variante Spectre
Oct 29, 2025
securityweek.com reports: New Attack Targets DDR5 Memory to Steal Keys From Intel and AMD TEEs
May 7, 2026
cybersecurity360.it reports: Sicurezza architetturale: i nuovi contratti hardware-software contro gli attacchi side-channel
May 22, 2026
infosecurity-magazine.com reports: Fake Gemini and Claude Code Sites Spread Infostealers Through SEO Poisoning
Aug 6, 2026
thehackernews.com reports: New Interrupt Injection Attack Can Bypass Spectre v2 Defenses on Intel and AMD CPUs
Aug 6, 2026
bleepingcomputer.com reports: New TONTOU CPU attack bypasses Spectre v2 fixes, leaks Linux password hashes
Aug 7, 2026
theregister.com reports: MIT boffins' TONTOU attack slips through Spectre defenses on Intel and AMD CPUs
Aug 12, 2026
theregister.com reports: Spectre rears its ugly head again as researchers show some RISC-V chips are susceptible
Aug 19, 2026
thehackernews.com reports: Cloudflare Workers Spectre Attack Leaks JWT From Co-Located Worker at 12 Bits/Second
Public PoC (5)
github.com/opsxcq/exploit-cve-2017-5715github.com/mathse/meltdown-spectre-bios-listgithub.com/GregAskew/SpeculativeExecutionAssessmentgithub.com/GalloLuigi/Analisi-CVE-2017-5715github.com/iamshivambhatt/Hardware-Vulnerability-with-Proof-of-Concept-
Unverified third-party code — review before executing.