CVE-2018-12130
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 5.9epss 1.6%
exploitation probability
1.6%top 27% of all CVEs
observed exploitation
nono source reports it
Microarchitectural Fill Buffer Data Sampling (MFBDS): Fill buffers on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N
Affected products
Intel Corporation · Central Processing Units (CPUs)References
http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00014.htmlhttp://lists.opensuse.org/opensuse-security-announce/2019-07/msg00052.htmlhttp://lists.opensuse.org/opensuse-security-announce/2019-07/msg00053.htmlhttp://packetstormsecurity.com/files/155281/FreeBSD-Security-Advisory-FreeBSD-SA-19-26.mcu.htmlhttps://access.redhat.com/errata/RHSA-2019:1455https://access.redhat.com/errata/RHSA-2019:2553https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdfhttps://cert-portal.siemens.com/productcert/pdf/ssa-616472.pdfhttps://kc.mcafee.com/corporate/index?page=content&id=SB10292https://lists.debian.org/debian-lts-announce/2019/06/msg00018.htmlhttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OH73SGTJ575OBCPSJFX6LX7KP2KZIEN4/https://seclists.org/bugtraq/2019/Jun/28