Information Exposure through Microarchitectural State after Transient Execution

The processor does not properly clear microarchitectural state after incorrect microcode assists or speculative execution, resulting in transient execution.

CVEs (3)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2026-18796 - - Sep 8, 2026 Sep 7, 2026 6.8 MEDIUM· v4 N/A· v3 N/A· v2 Any application that uses external QSPI flash for encrypted XIP on nRF5340 and relies on that encryption for confidentiality and/or integrity of the externally stored code. No specific nRF Connect SDK vers...Show more Any application that uses external QSPI flash for encrypted XIP on nRF5340 and relies on that encryption for confidentiality and/or integrity of the externally stored code. No specific nRF Connect SDK version is the root cause; the weakness is in the on-the-fly decryption scheme.Show less
CVE-2023-28746 - - Jun 17, 2026 Mar 14, 2024 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Information exposure through microarchitectural state after transient execution from some register files for some Intel(R) Atom(R) Processors may allow an authenticated user to potentially enable information disclosure v...Show more Information exposure through microarchitectural state after transient execution from some register files for some Intel(R) Atom(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.Show less
CVE-2022-40982 5Debian IntelNetapp+2 more 534All Flash Fabric Attached Storage 2820 All Flash Fabric Attached Storage 500fAll Flash Fabric Attached Storage 8300+531 more Jun 17, 2026 Aug 11, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Information exposure through microarchitectural state after transient execution in certain vector execution units for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure...Show more Information exposure through microarchitectural state after transient execution in certain vector execution units for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.Show less