CVE-2018-3640 in macOS

الملخص

بحسب MITRE

Systems with microprocessors utilizing speculative execution and that perform speculative reads of system registers may allow unauthorized disclosure of system parameters to an attacker with local user access via a side-channel analysis, aka Rogue System Register Read (RSRE), Variant 3a.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• حجز: 28/12/2017
• إفشاء: 22/05/2018
• الاعتدال: تمت الموافقة
• إدخال: 2
• ربط: عرض
• CPE: جاهز
• CWE: CWE-200 (مؤكد)
• CVSS: 5.6 (NVD)
• EPSS: 0.07556
• KEV: لا
• النشاطات: منخفض جدًا
• القطاع: Education, Industry, ...

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2018-3640
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2018-3640
• CVE Details: https://www.cvedetails.com/cve/CVE-2018-3640/