← Vulnerability feed

Vulnerability record · CVE-2018-9056 · published 27 March 2018

CVE-2018-9056: Intel atom c information exposure vulnerability

Intel · Atom C

Systems with microprocessors utilizing speculative execution may allow unauthorized disclosure of information to an attacker with local user access via a side-channel attack on the directional branch predictor, as demonstrated by a pattern history table (PHT), aka BranchScope.

5.6 CVSS 3.0 Medium EPSS 0.67% · top 49.9% CWE-200 · Information exposure
5.6CVSS 3.0 base score, v2 4.7
0.67%EPSS exploitation probability, 30 days
NoNot in CISA KEV
150Affected product versions listed by NVD
4References, 2 tagged exploit
17 Jun 2026Last modified by NVD

Description

Systems with microprocessors utilizing speculative execution may allow unauthorized disclosure of information to an attacker with local user access via a side-channel attack on the directional branch predictor, as demonstrated by a pattern history table (PHT), aka BranchScope.

CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

Affected products

150 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://www.cs.ucr.edu/~nael/pubs/asplos18.pdf ExploitThird Party Advisory
https://arstechnica.com/gadgets/2018/03/its-not-just-spectre-researchers-reveal-more-branch-prediction-attacks/ Third Party Advisory
http://www.cs.ucr.edu/~nael/pubs/asplos18.pdf ExploitThird Party Advisory
https://arstechnica.com/gadgets/2018/03/its-not-just-spectre-researchers-reveal-more-branch-prediction-attacks/ Third Party Advisory

Track CVE-2018-9056 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.6CVE-2018-3652Intel xeon e3 information exposure vulnerabilityExisting UEFI setting restrictions for DCI (Direct Connect Interface) in 5th and 6th generation Intel Xeon Processor E3 Family, Intel Xeon Scalable p…EPSS 0.37%5.6CVE-2018-3693Intel atom c vulnerabilitySystems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker wi…EPSS 8.6%5.6CVE-2018-3640Intel atom c observable discrepancy vulnerabilitySystems with microprocessors utilizing speculative execution and that perform speculative reads of system registers may allow unauthorized disclosure…EPSS 7.6%5.6CVE-2017-5715Intel CPUs speculative execution side-channel information disclosureCVE-2017-5715 is the Spectre variant 2 flaw in Intel microprocessors that use speculative execution and indirect branch prediction. A local attacker …EPSS 74%analysed5.6CVE-2017-5753Intel CPUs speculative execution side-channel information disclosure (Spectre v1)CVE-2017-5753 is a speculative execution and branch prediction side-channel flaw in Intel microprocessors that can leak information through observabl…EPSS 94%analysed5.6CVE-2017-5754Intel CPUs speculative execution side-channel information disclosureIntel microprocessors using speculative execution and indirect branch prediction can leak data through a side-channel analysis of the data cache. A l…EPSS 84%analysed5.5CVE-2019-14615Canonical ubuntu linux vulnerabilityInsufficient control flow in certain data structures for some Intel(R) Processors with Intel(R) Processor Graphics may allow an unauthenticated user …EPSS 1.4%5.5CVE-2018-3639Intel microprocessors speculative store bypass side-channel info disclosureCVE-2018-3639 is the Speculative Store Bypass (SSB) side-channel flaw, also called Variant 4, affecting Intel microprocessors that use speculative ex…EPSS 61%analysed

Source: NIST National Vulnerability Database (record CVE-2018-9056), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.