Microsoft Advisory for Microsoft Products (ESU)

Описание

Microsoft released an advisory and security updates related to a newly-discovered class of hardware vulnerabilities (known as Spectre and Meltdown). An additional vulnerability involving side channel speculative execution has been announced and assigned CVE-2018-3665.

An attacker locally could cause information stored in FP (Floating Point), MMX, and SSE register state to be disclosed across security boundaries on Intel Core family CPUs through speculative execution. An attacker must be able to execute code locally on a system in order to exploit this vulnerability, similar to the other speculative execution vulnerabilities.

Первичный источник обнаружения

• ADV180016
  

Связанные продукты

• Microsoft-Windows
• Microsoft-Windows-Server
• Microsoft-Windows-Server-2012
• Microsoft-Windows-8
• Microsoft-Windows-7
• Microsoft-Windows-Server-2008
• Microsoft-Windows-10

Список CVE

Список KB

• 4338818
• 4338823
• 4345459
• 4338821
• 4343899
• 4343900
• 4341832

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com