CVE-2024-45332

Summary

Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution in the indirect branch predictors for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

Affected Software

Weaknesses

• Information Disclosure
• CWE-1423: Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution

ADP Enrichment

CVE Program Container

Additional References

• http://www.openwall.com/lists/oss-security/2025/05/13/7
• https://comsec.ethz.ch/research/microarch/branch-privilege-injection/
• https://lists.debian.org/debian-lts-announce/2025/05/msg00021.html

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01247.html

• ←Previous
• Next→