CVE-2024-28956
MediumCVSS 5.6Exploitation Probability (EPSS)
Low risk29th percentile - higher than 29% of all known CVEs
Summary
A vulnerability in the microarchitecture of Intel processors allows disclosure of sensitive information during transient execution. An authenticated user with local access can potentially read data that should not be accessible.
Risk Assessment
The risk involves potential leakage of confidential data, such as cryptographic keys or passwords, by a local attacker. This could lead to system security breaches and loss of information confidentiality.
Recommendation
Apply microcode updates provided by the processor manufacturer and update the system BIOS/UEFI. Also implement process isolation mechanisms and restrict local access to trusted users.
Original NVD description (English source)
Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.