© 2026 vulntracker.io

CVE-2018-3620

MEDIUM

5.6

CVSS Score

Published: August 14, 2018 at 07:00 PM UTC

Updated: June 17, 2026 at 01:57 AM UTC

8 products affected across 1 vendorCore I7Core I5Core I3

Using Multiple by Intel Corporation?

Get instant alerts when new vulnerabilities affect Multiple - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM5.6

Exploit prediction

EPSS 6%

SSVC

No known exploit

Description

Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data cache to an attacker with local user access via a terminal page fault and a side-channel analysis.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Core I7 · Intel

95%

2600 2600k 2600s 2610ue 2617m 2620m 2629m 2630qm 2635qm 2637m 2640m 2649m 2655le 2657m 2670qm 2675qm 2677m 2700k 2710qe 2715qe 2720qm 2760qm 2820qm 2860qm 2920xm 2960xm 3517u 3517ue 3520m 3537u 3540m 3555le 3610qe 3610qm 3612qe 3612qm 3615qe 3615qm 3630qm 3632qm 3635qm 3667u 3687u 3689y 3720qm 3740qm 3770 3770k 3770s 3770t 3820qm 3840qm 4500u 4510u 4550u 4558u 4578u 4600m 4600u 4610m 4610y 4650u 4700ec 4700eq 4700hq 4700mq 4702ec 4702hq 4702mq 4710hq 4710mq 4712hq 4712mq 4720hq 4722hq 4750hq 4760hq 4765t 4770 4770hq 4770k 4770r 4770s 4770t 4770te 4771 4785t 4790 4790k 4790s 4790t 4800mq 4810mq 4850hq 4860hq 4870hq 4900mq 4910mq 4950hq 4960hq 4980hq 5500u 5550u 5557u 5600u 5650u 5700eq 5700hq 5750hq 5775c 5775r 5850eq 5850hq 5950hq 610e 620le 620lm 620m 620ue 620um 640lm 640m 640um 660lm 660ue 660um 680um 720qm 740qm 7500u 7560u 7567u 7600u 7660u 7700 7700hq 7700k 7700t 7820eq 7820hk 7820hq 7920hq 7y75 820qm 840qm 8550u 860 860s 8650u 870 8700 8700k 870s 875k 880 920 920xm 930 940 940xm 950 960 965 970 975 980 980x 990x

Core M · Intel

95%

5y10 5y10a 5y10c 5y31 5y51 5y70 5y71

Core M3 · Intel

95%

Core M5 · Intel

95%

Core M7 · Intel

95%

95%

All versions

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

References (53)

x_refsource_CONFIRMThird Party Advisory

Source: [email protected]

http://support.lenovo.com/us/en/solutions/LEN-24163

x_refsource_CONFIRMThird Party Advisory

Source: [email protected]

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180815-01-cpu-en

VDB Entryx_refsource_BIDThird Party Advisory

Source: [email protected]

http://www.securityfocus.com/bid/105080

VDB Entryx_refsource_SECTRACKThird Party Advisory

Source: [email protected]

http://www.securitytracker.com/id/1041451

x_refsource_CONFIRMThird Party Advisory

Source: [email protected]

http://www.vmware.com/security/advisories/VMSA-2018-0021.html

x_refsource_CONFIRMThird Party Advisory

Source: [email protected]

http://xenbits.xen.org/xsa/advisory-273.html

Vendor Advisoryx_refsource_REDHATThird Party Advisory

Source: [email protected]

https://access.redhat.com/errata/RHSA-2018:2384

Vendor Advisoryx_refsource_REDHATThird Party Advisory

Source: [email protected]

https://access.redhat.com/errata/RHSA-2018:2387

SSVC — Action Prioritization

SSVCNo known exploitNot automatablePartial impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

5.6MEDIUMCISA-ADP

Attack Vector: LOCAL
Complexity: HIGH
Privileges: LOW
User Interaction: NONE
Scope: CHANGED
Confidentiality: HIGH
Integrity: NONE
Availability: NONE

Vector?

Quick Info

StatusMODIFIED

CWE

CWE-203

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create account Sign in

Free plan, no card