CVE-2021-26313

Name: CVE-2021-26313
Creator: NVD / NIST
Published: 2021-06-09T12:15:07.75+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

MEDIUMCVSS 5.5/10EPSS 0.33%

Last modified Jun 17, 2026

CVE-2021-26313 is a medium-severity vulnerability rated 5.5/10 on the CVSS scale. Potential speculative code store bypass in all supported CPU products, in conjunction with software vulnerabilities relating to speculative execution of overwritten instructions, may cause an incorrect speculation and could result in data leakage.. EPSS estimates a 0.33% chance of exploitation in the next 30 days.

Description

Potential speculative code store bypass in all supported CPU products, in conjunction with software vulnerabilities relating to speculative execution of overwritten instructions, may cause an incorrect speculation and could result in data leakage.

Metrics

CVSS 3.1

5.5/10

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS Probability

0.33%

24.6th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

Vendor	Product	Versions
Xen	Xen	All versions
Arm	Cortex-A72	All versions
Broadcom	Bcm2711	All versions
Intel	Core I7-10700k	All versions
Intel	Core I7-7700k	All versions
Intel	Core I9-9900k	All versions
Intel	Xeon Silver 4214	All versions
Debian	Debian Linux	10.0

References

https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1003Vendor Advisory
https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1003Vendor Advisory

Timeline

Published: Jun 9, 2021
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2021-26313?

How severe is CVE-2021-26313?

CVE-2021-26313 has a CVSS score of 5.5/10 (MEDIUM severity). The EPSS model estimates a 0.33% probability of exploitation in the next 30 days.

How do I fix CVE-2021-26313?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2021-26313?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST