CVE-2024-45332
Advisory lineage Upstream: 0 Downstream: 25
Deferred
Published: 13 May 2025, 21:03
Last modified:03 Nov 2025, 19:30
Vulnerability Summary
Overall Risk (default)
low
23/100 CVSS Score
5.7 MEDIUM
v4.0 (cve.org)
EPSS Score
0.21% LOW
0% probability +0.18%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected
Timeline
13 May 2025, 21:03
Published
Vulnerability first disclosed
03 Nov 2025, 19:30
Last Modified
Vulnerability information updated
Description
Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution in the indirect branch predictors for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
CVSS Metrics
- v4.0•MEDIUM•Score: 5.7CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
- v4.0•MEDIUM•Score: 5.7CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- v3.1•MEDIUM•Score: 5.6CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
EPSS Trends
Current EPSS score: 0.21%• Percentile: 43%
Techniques & Countermeasures
- CWE-1423•Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution
Shared microarchitectural predictor state may allow code to influence transient execution across a hardware boundary, potentially exposing data that is accessible beyond the boundary over a covert channel.