{"id":"CVE-2017-5753","published":"2018-01-04T13:00:00Z","modified":"2026-05-28T18:00:56Z","title":"Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure…","vendor":"Intel Corporation","product":"Most Modern Operating Systems","tier":"core","eol":null,"affectedVersions":[{"vendor":"Intel Corporation","product":"Most Modern Operating Systems","versions":["All"]}],"description":{"text":"Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.","provenance":"source","from":"CVE.org"},"summary":{"text":"Intel microprocessors that use speculative execution and branch prediction, as found in most modern operating systems, contain a flaw that can leak information through side channels. An attacker needs local user access on the affected system, and the attack relies on side-channel analysis, which is considered a high-complexity technique and requires low privileges.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-29T07:13:22Z"},"cvss":{"score":5.6,"severity":"MEDIUM","version":"3.1","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","provenance":"source","from":"CISA ADP Vulnrichment"},"epss":{"score":0.93838,"percentile":0.99843,"date":"2026-10-28","provenance":"source"},"kev":null,"vulncheckKev":{"dateAdded":"2026-09-08","exploitedFirstSeen":"2026-09-08","ransomware":false,"evidence":[{"url":"https://www.recordedfuture.com/blog/august-2026-cve-landscape","date":"2026-09-08"}],"evidenceTotal":1,"provenance":"source"},"exploited":true,"otx":{"pulseCount":2,"pulses":[{"name":"ripe.arin.enom.cpanel.cpcalendar.iana.networksolutions.02050.webdisk.webmail.","url":"https://otx.alienvault.com/pulse/69fdc02bea1e4ec923b01688","created":"2026-05-08"},{"name":"CVE Data","url":"https://otx.alienvault.com/pulse/69929b597293fe5837b9c95c","created":"2026-02-16"}],"provenance":"machine"},"cwes":[{"id":"CWE-203","name":"Observable Discrepancy"}],"references":[{"url":"http://nvidia.custhelp.com/app/answers/detail/a_id/4609","tags":["x_refsource_CONFIRM"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/07/msg00015.html","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://www.debian.org/security/2018/dsa-4187","tags":["vendor-advisory","x_refsource_DEBIAN"]},{"url":"https://usn.ubuntu.com/3542-2/","tags":["vendor-advisory","x_refsource_UBUNTU"]},{"url":"https://security.gentoo.org/glsa/201810-06","tags":["vendor-advisory","x_refsource_GENTOO"]},{"url":"https://usn.ubuntu.com/3540-2/","tags":["vendor-advisory","x_refsource_UBUNTU"]},{"url":"https://access.redhat.com/security/vulnerabilities/speculativeexecution","tags":["x_refsource_CONFIRM"]},{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV180002","tags":["x_refsource_CONFIRM"]},{"url":"https://usn.ubuntu.com/3597-1/","tags":["vendor-advisory","x_refsource_UBUNTU"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/07/msg00016.html","tags":["mailing-list","x_refsource_MLIST"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00008.html","tags":["vendor-advisory","x_refsource_SUSE"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00007.html","tags":["vendor-advisory","x_refsource_SUSE"]},{"url":"http://nvidia.custhelp.com/app/answers/detail/a_id/4611","tags":["x_refsource_CONFIRM"]},{"url":"https://security.googleblog.com/2018/01/todays-cpu-vulnerability-what-you-need.html","tags":["x_refsource_MISC"]},{"url":"https://cert.vde.com/en-us/advisories/vde-2018-002","tags":["x_refsource_CONFIRM"]},{"url":"https://usn.ubuntu.com/3580-1/","tags":["vendor-advisory","x_refsource_UBUNTU"]},{"url":"https://support.f5.com/csp/article/K91229003","tags":["x_refsource_CONFIRM"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00014.html","tags":["vendor-advisory","x_refsource_SUSE"]},{"url":"https://www.debian.org/security/2018/dsa-4188","tags":["vendor-advisory","x_refsource_DEBIAN"]},{"url":"https://access.redhat.com/errata/RHSA-2018:0292","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"http://xenbits.xen.org/xsa/advisory-254.html","tags":["x_refsource_CONFIRM"]},{"url":"https://security.netapp.com/advisory/ntap-20180104-0001/","tags":["x_refsource_CONFIRM"]},{"url":"https://www.synology.com/support/security/Synology_SA_18_01","tags":["x_refsource_CONFIRM"]},{"url":"http://packetstormsecurity.com/files/145645/Spectre-Information-Disclosure-Proof-Of-Concept.html","tags":["x_refsource_MISC"]},{"url":"http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-001.txt","tags":["x_refsource_CONFIRM"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/07/msg00020.html","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability","tags":["x_refsource_CONFIRM"]},{"url":"http://www.kb.cert.org/vuls/id/584653","tags":["third-party-advisory","x_refsource_CERT-VN"]},{"url":"https://www.kb.cert.org/vuls/id/180049","tags":["third-party-advisory","x_refsource_CERT-VN"]},{"url":"https://cert.vde.com/en-us/advisories/vde-2018-003","tags":["x_refsource_CONFIRM"]},{"url":"https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes","tags":["x_refsource_CONFIRM"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html","tags":["x_refsource_CONFIRM"]},{"url":"https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-hpesbhf03805en_us","tags":["x_refsource_CONFIRM"]},{"url":"https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-18-0001","tags":["x_refsource_CONFIRM"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-505225.pdf","tags":["x_refsource_CONFIRM"]},{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03871en_us","tags":["x_refsource_CONFIRM"]},{"url":"https://usn.ubuntu.com/3549-1/","tags":["vendor-advisory","x_refsource_UBUNTU"]},{"url":"https://www.suse.com/c/suse-addresses-meltdown-spectre-vulnerabilities/","tags":["x_refsource_CONFIRM"]},{"url":"https://support.citrix.com/article/CTX231399","tags":["x_refsource_CONFIRM"]},{"url":"https://spectreattack.com/","tags":["x_refsource_MISC"]},{"url":"https://aws.amazon.com/de/security/security-bulletins/AWS-2018-013/","tags":["x_refsource_CONFIRM"]},{"url":"https://blog.mozilla.org/security/2018/01/03/mitigations-landing-new-class-timing-attack/","tags":["x_refsource_CONFIRM"]},{"url":"http://www.securitytracker.com/id/1040071","tags":["vdb-entry","x_refsource_SECTRACK"]},{"url":"http://www.securityfocus.com/bid/102371","tags":["vdb-entry","x_refsource_BID"]},{"url":"https://usn.ubuntu.com/3597-2/","tags":["vendor-advisory","x_refsource_UBUNTU"]},{"url":"http://nvidia.custhelp.com/app/answers/detail/a_id/4614","tags":["x_refsource_CONFIRM"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00006.html","tags":["vendor-advisory","x_refsource_SUSE"]},{"url":"https://usn.ubuntu.com/3540-1/","tags":["vendor-advisory","x_refsource_UBUNTU"]},{"url":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180104-cpusidechannel","tags":["vendor-advisory","x_refsource_CISCO"]},{"url":"https://usn.ubuntu.com/usn/usn-3516-1/","tags":["vendor-advisory","x_refsource_UBUNTU"]},{"url":"https://www.vmware.com/us/security/advisories/VMSA-2018-0002.html","tags":["x_refsource_CONFIRM"]},{"url":"https://www.exploit-db.com/exploits/43427/","tags":["exploit","x_refsource_EXPLOIT-DB"]},{"url":"https://usn.ubuntu.com/3541-1/","tags":["vendor-advisory","x_refsource_UBUNTU"]},{"url":"https://usn.ubuntu.com/3541-2/","tags":["vendor-advisory","x_refsource_UBUNTU"]},{"url":"https://usn.ubuntu.com/3542-1/","tags":["vendor-advisory","x_refsource_UBUNTU"]},{"url":"https://googleprojectzero.blogspot.com/2018/01/reading-privileged-memory-with-side.html","tags":["x_refsource_MISC"]},{"url":"https://support.lenovo.com/us/en/solutions/LEN-18282","tags":["x_refsource_CONFIRM"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2018-01/msg00016.html","tags":["vendor-advisory","x_refsource_SUSE"]},{"url":"http://nvidia.custhelp.com/app/answers/detail/a_id/4613","tags":["x_refsource_CONFIRM"]},{"url":"https://lists.debian.org/debian-lts-announce/2019/03/msg00034.html","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://lists.debian.org/debian-lts-announce/2019/04/msg00004.html","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html","tags":["x_refsource_MISC"]},{"url":"https://seclists.org/bugtraq/2019/Jun/36","tags":["mailing-list","x_refsource_BUGTRAQ"]},{"url":"http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2019-003.txt","tags":["x_refsource_CONFIRM"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf","tags":["x_refsource_CONFIRM"]},{"url":"https://cdrdv2.intel.com/v1/dl/getContent/685359","tags":["x_refsource_CONFIRM"]}],"techniques":[],"reports":[],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2017-14830","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2017-14830","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[{"id":43427,"url":"https://www.exploit-db.com/exploits/43427","title":"Multiple CPUs - 'Spectre' Information Disclosure","type":"local","platform":"multiple","date":"2018-01-03","verified":false,"provenance":"source"}],"exploitSources":{"exploitdb":{"count":1,"earliest":"2018-01-03"},"pocGithub":{"count":6,"skipped":1,"earliest":"2018-01-04","earliestUrl":"https://github.com/Eugnis/spectre-attack","repos":[{"name":"Eugnis/spectre-attack","url":"https://github.com/Eugnis/spectre-attack","stars":772,"created":"2018-01-04"},{"name":"00052/spectre-attack-example","url":"https://github.com/00052/spectre-attack-example","stars":12,"created":"2018-01-05"},{"name":"ixtal23/spectreScope","url":"https://github.com/ixtal23/spectreScope","stars":7,"created":"2018-01-06"},{"name":"EdwardOwusuAdjei/Spectre-PoC","url":"https://github.com/EdwardOwusuAdjei/Spectre-PoC","stars":4,"created":"2018-01-04"},{"name":"pedrolucasoliva/spectre-attack-demo","url":"https://github.com/pedrolucasoliva/spectre-attack-demo","stars":1,"created":"2018-01-06"}]},"first":{"date":"2018-01-03","source":"Exploit-DB","url":"https://www.exploit-db.com/exploits/43427"},"provenance":"source"},"exploitRefs":["https://www.exploit-db.com/exploits/43427/","http://packetstormsecurity.com/files/145645/Spectre-Information-Disclosure-Proof-Of-Concept.html"],"flow":[],"timeline":[{"date":"2018-01-03","kind":"exploit-public","label":"First public exploit: Exploit-DB (EDB-43427); later: PoC-in-GitHub 2018-01-04","url":"https://www.exploit-db.com/exploits/43427","provenance":"source"},{"date":"2018-01-04","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2017-5753","provenance":"source"},{"date":"2026-09-08","kind":"exploited-reported","label":"Exploitation first reported (VulnCheck KEV evidence)","url":"https://www.recordedfuture.com/blog/august-2026-cve-landscape","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":"Exploit-DB","daysToKev":null},"priority":{"score":75.0,"factors":[{"name":"In a KEV catalog","points":35.0,"detail":"listed in VulnCheck KEV"},{"name":"Recent KEV listing","points":10.0,"detail":"added 51 days ago"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.97,"detail":"percentile 0.9984"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":5.0,"detail":"1 NVD reference tagged Exploit; 1 Exploit-DB entry; 1 NVD exploit link; 6 PoC-in-GitHub repos"},{"name":"Mentioned in OTX pulses","points":1.08,"detail":"2 pulses"},{"name":"CVSS severity","points":3.92,"detail":"base score 5.6"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}