CVE-2018-3620

Severity: medium (CVSS 5.6 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 5.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-08-14 · updated 2026-06-17
Weakness: CWE-203

Description

Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data cache to an attacker with local user access via a terminal page fault and a side-channel analysis.

Affected products

Intel Core I3: 330e, 330m, 330um, 350m, 370m, 380m (+106)
Intel Core I5: 430m, 430um, 450m, 460m, 470um, 480m (+163)
Intel Core I7: 7y75, 610e, 620le, 620lm, 620m, 620ue (+162)
Intel Core M: 5y10, 5y10a, 5y10c, 5y31, 5y51, 5y70 (+1)
Intel Core M3: 6y30, 7y30, 7y32
Intel Core M5: 6y54, 6y57
Intel Core M7: 6y75
Intel Xeon: all versions

References

http://support.lenovo.com/us/en/solutions/LEN-24163
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180815-01-cpu-en
http://www.securityfocus.com/bid/105080
http://www.securitytracker.com/id/1041451
http://www.vmware.com/security/advisories/VMSA-2018-0021.html
http://xenbits.xen.org/xsa/advisory-273.html
https://access.redhat.com/errata/RHSA-2018:2384
https://access.redhat.com/errata/RHSA-2018:2387
https://access.redhat.com/errata/RHSA-2018:2388
https://access.redhat.com/errata/RHSA-2018:2389
https://access.redhat.com/errata/RHSA-2018:2390
https://access.redhat.com/errata/RHSA-2018:2391

Get alerted when CVE-2018-3620 or the next vulnerability affects your stack