CVE-2025-35979
MediumSummary
Vulnerability in Intel processors allows exposure of sensitive information via shared microarchitectural predictor state during transient execution in VMX non-root (guest) operation. An unprivileged software adversary with an authenticated user can exploit this state to access data.
Risk Assessment
The risk involves potential leakage of sensitive data, such as cryptographic keys or passwords, from virtual machines running on affected Intel processors, leading to confidentiality breaches in multi-tenant environments.
Recommendation
Immediately apply microcode updates provided by the vendor and implement isolation mechanisms, such as disabling predictor sharing or using dedicated hardware solutions.
Original NVD description (English source)
Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel(R) Processors within VMX non-root (guest) operation may allow an information disclosure. Unprivileged software adversary with an authenticated user combined with a