Navigation section
cve-2017-5753
About this tag
CVE-2017-5753, also known as Spectre variant 1, is a CPU hardware vulnerability that enables side-channel attacks by exploiting speculative execution. This flaw can allow an attacker to bypass memory isolation and access sensitive information from affected systems, including desktops, laptops, and cloud computers. Microsoft has addressed this vulnerability through security updates and mitigations, and has also launched a bounty program to encourage further research into speculative execution side-channel vulnerabilities. Discussions on WindowsForum cover the disclosure, impact, and mitigation strategies for CVE-2017-5753, as well as related variants like 3a and 4.
-
TA18-141A: Side-Channel Vulnerability Variants 3a and 4
Original release date: May 21, 2018 Systems Affected CPU hardware implementations Overview On May 21, 2018, new variants—known as 3A and 4—of the side-channel central processing unit (CPU) hardware vulnerability were Link Removed. These variants can allow an attacker to obtain access to...- News
- Thread
- attack cpu cve-2017-5715 cve-2017-5753 cve-2017-5754 cve-2018-3639 cve-2018-3640 exfiltration hardware impact meltdown mitigation patch security side-channel software spectre variant variant 3a vulnerability
- Replies: 0
- Forum: Security Alerts
-
Speculative Execution Bounty Launch
Today, Microsoft is announcing the launch of a limited-time bounty program for speculative execution side channel vulnerabilities. This new class of vulnerabilities was disclosed in January 2018 and represented a major advancement in the research in this field. In recognition of that threat...- News
- Thread
- attack techniques bounty program bounty tiers coordinated disclosure cve-2017-5715 cve-2017-5753 microsoft microsoft azure mitigation payouts research security research speculative execution threat landscape tier 1 tier 2 tier 3 tier 4 vulnerability windows 10
- Replies: 0
- Forum: Security Alerts