VulnerabilityModified
CVE-2019-0174
Logic condition in specific microprocessors may allow an authenticated user to potentially enable partial physical address information disclosure via local access.
LOW 3.3EPSS 0.39%
Does this matter?
Lower severity and a low EPSS score (0.39%). Track it; it rarely justifies an emergency change on its own.
Description
Logic condition in specific microprocessors may allow an authenticated user to potentially enable partial physical address information disclosure via local access.
- CVSS 3.0
- 3.3 LOWCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
- EPSS
- 0.39% probability · 32th percentile
- Public exploits
- None in Exploit-DB
- CISA KEV
- Not listed
- Affected
- intel/i9-9900x firmware · intel/i9-9920x firmware · intel/i9-9960x firmware · intel/i9-9980xe firmware · intel/i9-9940x firmware · intel/i9-7960x firmware · intel/i9-7980xe firmware · intel/i9-7940x firmware · intel/i9-7920x firmware · intel/i9-7900x firmware · intel/i7-7820x firmware · intel/i7-7800x firmware · intel/i5-4422e firmware · intel/i5-4410e firmware · intel/i5-4402ec firmware · intel/i5-4402e firmware · intel/i5-4400e firmware · intel/i5-4460t firmware · intel/i5-4460s firmware · intel/i5-4460 firmware · +40 more
- Source
- secure@intel.com
EPSS 0.4% since 27 October 2026; no change recorded yet. Points are recorded when the score first appears and whenever it moves by a percentage point or more.
References
- http://www.securityfocus.com/bid/108731
- https://security.netapp.com/advisory/ntap-20190612-0001/
- https://support.f5.com/csp/article/K18165180
- https://support.lenovo.com/us/en/product_security/LEN-27842
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00247.html
- http://www.securityfocus.com/bid/108731
- https://security.netapp.com/advisory/ntap-20190612-0001/
- https://support.f5.com/csp/article/K18165180
- https://support.lenovo.com/us/en/product_security/LEN-27842
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00247.html
Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.