CVE-2018-3639: medium-severity vulnerability in Intel Corporation Multiple
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
Prioritize patching. It exploitation observed by VulnCheck and has a public proof of concept.
Official vendor statements in CSAF/VEX format: whether their product is affected, already fixed, or ruled out — and why. These are the vendor's assertions, not Vexday's judgment.
A flaw in how processors handle memory operations allows local attackers to read sensitive information that should be hidden. The processor sometimes reads data before confirming all previous write operations are complete, creating a side-channel that leaks information.
CVE-2018-3639 (Speculative Store Bypass) exploits speculative execution in processors that load memory before resolving prior store addresses. Local attackers can infer sensitive data through timing analysis and cache-state observation; requires local user access and leverages the processor's speculation mechanism to bypass memory ordering protections.
In the same product, most dangerous first.