What’s Vulnerable › Vulnerabilities

CVE-2021-26313: AMD Speculative Code Store Bypass

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-06-09 · updated 2026-06-17
• Weakness: CWE-208

Description

Potential speculative code store bypass in all supported CPU products, in conjunction with software vulnerabilities relating to speculative execution of overwritten instructions, may cause an incorrect speculation and could result in data leakage.

Affected products

• Arm Cortex-A72: all versions
• Broadcom Bcm2711: all versions
• Debian Linux: 10.0
• Intel Core I7-10700K: all versions
• Intel Core I7-7700K: all versions
• Intel Core I9-9900K: all versions
• Intel Xeon Silver 4214: all versions
• xen: all versions

References

• https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1003
• https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1003

Get alerted when CVE-2021-26313 or the next vulnerability affects your stack