CVE-2024-28956
- State
- Published
- Severity
- 5.7 Medium
- Published
- May 13, 2025
- Updated
- Oct 15, 2026
- Reserved
- May 23, 2024
Description
Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 5.7 Medium | CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N | intel |
| 3.1 | 5.6 Medium | CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N | intel |
Weaknesses
- CWE-1421 Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution
Affected Products
| Product | Versions |
|---|---|
Intel(R) Processorsn/a |
|
References
- https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01153.html
- http://xenbits.xen.org/xsa/advisory-469.html
- http://www.openwall.com/lists/oss-security/2025/05/12/5
- https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html
- https://lists.debian.org/debian-lts-announce/2025/08/msg00010.html
- https://lists.debian.org/debian-lts-announce/2025/05/msg00021.html
- https://cert-portal.siemens.com/productcert/html/ssa-019113.html
- https://cert-portal.siemens.com/productcert/html/ssa-457936.html
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.