{"id":"CVE-2018-3639","url":"https://www.cyber-defence.io/tools/cve/CVE-2018-3639","generatedAt":"2026-10-28T20:07:51.405Z","title":"Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with local user access via a…","description":"Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka Speculative Store Bypass (SSB), Variant 4.","published":"2018-05-22T12:29:00.000Z","lastModified":"2026-06-17T01:57:36.000Z","status":"Modified","sourceIdentifier":"secure@intel.com","cvss":{"version":"3.1","score":5.5,"severity":"MEDIUM","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},"cwe":["CWE-203"],"affected":["intel/atom c","intel/atom e","intel/atom x5-e3930","intel/atom x5-e3940","intel/atom x7-e3950","intel/atom z","intel/celeron j","intel/celeron n","intel/core i3","intel/core i5","intel/core i7","intel/core m","intel/pentium","intel/pentium j","intel/pentium silver","intel/xeon e-1105c","intel/xeon e3","intel/xeon e3 1105c v2","intel/xeon e3 1125c v2","intel/xeon e3 1220 v2","intel/xeon e3 1220 v3","intel/xeon e3 1220 v5","intel/xeon e3 1220 v6","intel/xeon e3 12201","intel/xeon e3 12201 v2","intel/xeon e3 1220l v3","intel/xeon e3 1225","intel/xeon e3 1225 v2","intel/xeon e3 1225 v3","intel/xeon e3 1225 v5","intel/xeon e3 1225 v6","intel/xeon e3 1226 v3","intel/xeon e3 1230","intel/xeon e3 1230 v2","intel/xeon e3 1230 v3","intel/xeon e3 1230 v5","intel/xeon e3 1230 v6","intel/xeon e3 1230l v3","intel/xeon e3 1231 v3","intel/xeon e3 1235","intel/xeon e3 1235l v5","intel/xeon e3 1240","intel/xeon e3 1240 v2","intel/xeon e3 1240 v3","intel/xeon e3 1240 v5","intel/xeon e3 1240 v6","intel/xeon e3 1240l v3","intel/xeon e3 1240l v5","intel/xeon e3 1241 v3","intel/xeon e3 1245","intel/xeon e3 1245 v2","intel/xeon e3 1245 v3","intel/xeon e3 1245 v5","intel/xeon e3 1245 v6","intel/xeon e3 1246 v3","intel/xeon e3 1258l v4","intel/xeon e3 1260l","intel/xeon e3 1260l v5","intel/xeon e3 1265l v2","intel/xeon e3 1265l v3"],"epss":{"score":0.60631,"percentile":0.99141,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":1,"verified":true,"firstPublished":"2018-05-22","source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[{"edbId":44695,"kind":"exploit","title":"AMD / ARM / Intel - Speculative Execution Variant 4 Speculative Store Bypass","url":"https://www.exploit-db.com/exploits/44695","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/hardware/dos/44695.c","file":"exploits/hardware/dos/44695.c","published":"2018-05-22","added":"2018-05-22","updated":"2018-05-22","author":"Google Security Research","type":"dos","platform":"hardware","port":null,"verified":true,"codes":["CVE-2018-3639"],"tags":null,"aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":"https://bugs.chromium.org/p/project-zero/issues/detail?id=1528"}]},"verdict":{"level":"urgent","text":"EPSS puts the probability of exploitation in the next 30 days at 60.6%, higher than 99% of all known CVEs. Patch or mitigate before the next change window."},"changes":[],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00058.html","tags":["Broken Link"],"source":"secure@intel.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00059.html","tags":["Broken Link"],"source":"secure@intel.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00007.html","tags":["Broken Link"],"source":"secure@intel.com"},{"url":"http://support.lenovo.com/us/en/solutions/LEN-22133","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"http://www.fujitsu.com/global/support/products/software/security/products-f/cve-2018-3639e.html","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"http://www.openwall.com/lists/oss-security/2020/06/10/1","tags":["Mailing List","Third Party Advisory"],"source":"secure@intel.com"},{"url":"http://www.openwall.com/lists/oss-security/2020/06/10/2","tags":["Mailing List","Third Party Advisory"],"source":"secure@intel.com"},{"url":"http://www.openwall.com/lists/oss-security/2020/06/10/5","tags":["Mailing List","Third Party Advisory"],"source":"secure@intel.com"},{"url":"http://www.securityfocus.com/bid/104232","tags":["Third Party Advisory","VDB Entry"],"source":"secure@intel.com"},{"url":"http://www.securitytracker.com/id/1040949","tags":["Third Party Advisory","VDB Entry"],"source":"secure@intel.com"},{"url":"http://www.securitytracker.com/id/1042004","tags":["Third Party Advisory","VDB Entry"],"source":"secure@intel.com"},{"url":"http://xenbits.xen.org/xsa/advisory-263.html","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://access.redhat.com/errata/RHSA-2018:1629","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://access.redhat.com/errata/RHSA-2018:1630","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://access.redhat.com/errata/RHSA-2018:1632","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://access.redhat.com/errata/RHSA-2018:1633","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://access.redhat.com/errata/RHSA-2018:1635","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://access.redhat.com/errata/RHSA-2018:1636","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://access.redhat.com/errata/RHSA-2018:1637","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://access.redhat.com/errata/RHSA-2018:1638","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://access.redhat.com/errata/RHSA-2018:1639","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://access.redhat.com/errata/RHSA-2018:1640","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://access.redhat.com/errata/RHSA-2018:1641","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://access.redhat.com/errata/RHSA-2018:1642","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://access.redhat.com/errata/RHSA-2018:1643","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://access.redhat.com/errata/RHSA-2018:1644","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://access.redhat.com/errata/RHSA-2018:1645","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://access.redhat.com/errata/RHSA-2018:1646","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://access.redhat.com/errata/RHSA-2018:1647","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://access.redhat.com/errata/RHSA-2018:1648","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://access.redhat.com/errata/RHSA-2018:1649","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://access.redhat.com/errata/RHSA-2018:1650","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://access.redhat.com/errata/RHSA-2018:1651","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://access.redhat.com/errata/RHSA-2018:1652","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://access.redhat.com/errata/RHSA-2018:1653","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://access.redhat.com/errata/RHSA-2018:1654","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://access.redhat.com/errata/RHSA-2018:1655","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://access.redhat.com/errata/RHSA-2018:1656","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://access.redhat.com/errata/RHSA-2018:1657","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://access.redhat.com/errata/RHSA-2018:1658","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://access.redhat.com/errata/RHSA-2018:1659","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://access.redhat.com/errata/RHSA-2018:1660","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://access.redhat.com/errata/RHSA-2018:1661","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://access.redhat.com/errata/RHSA-2018:1662","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://access.redhat.com/errata/RHSA-2018:1663","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://access.redhat.com/errata/RHSA-2018:1664","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://access.redhat.com/errata/RHSA-2018:1665","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://access.redhat.com/errata/RHSA-2018:1666","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://access.redhat.com/errata/RHSA-2018:1667","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://access.redhat.com/errata/RHSA-2018:1668","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://access.redhat.com/errata/RHSA-2018:1669","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://access.redhat.com/errata/RHSA-2018:1674","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://access.redhat.com/errata/RHSA-2018:1675","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://access.redhat.com/errata/RHSA-2018:1676","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://access.redhat.com/errata/RHSA-2018:1686","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://access.redhat.com/errata/RHSA-2018:1688","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://access.redhat.com/errata/RHSA-2018:1689","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://access.redhat.com/errata/RHSA-2018:1690","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://access.redhat.com/errata/RHSA-2018:1696","tags":["Third Party Advisory"],"source":"secure@intel.com"},{"url":"https://access.redhat.com/errata/RHSA-2018:1710","tags":["Third Party Advisory"],"source":"secure@intel.com"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2018-3639","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}