CVE-2022-25368

Spectre BHB is a variant of Spectre-v2 in which malicious code uses the shared branch history (stored in the CPU BHB) to influence mispredicted branches in the victim's hardware context. Speculation caused by these mispredicted branches can then potentially be used to cause cache allocation, which can then be used to infer information that should be protected.

• https://amperecomputing.com/products/security-bulletins/impact-of-spectre-bhb-on-ampere.htmlVendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23960Third Party Advisory, VDB Entry
• https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability/spectre-bhbPatch, Technical Description, Vendor Advisory
• https://amperecomputing.com/products/security-bulletins/impact-of-spectre-bhb-on-ampere.htmlVendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23960Third Party Advisory, VDB Entry
• https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability/spectre-bhbPatch, Technical Description, Vendor Advisory

Published

Mar 10, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-25360WatchGuard Firebox and XTM appliances allow an authenticated…8.8
• CVE-2022-25361WatchGuard Firebox and XTM appliances allow an unauthenticat…9.1
• CVE-2022-25363WatchGuard Firebox and XTM appliances allow an authenticated…6.5
• CVE-2022-25364In Gradle Enterprise before 2021.4.2, the default built-in b…8.1
• CVE-2022-25365Docker Desktop before 4.5.1 on Windows allows attackers to m…7.8
• CVE-2022-25366Cryptomator through 1.6.5 allows DYLIB injection because, al…7.8
• CVE-2022-25369An issue was discovered in Dynamicweb before 9.12.8. An atta…9.8
• CVE-2022-2537The WooCommerce PDF Invoices & Packing Slips WordPress plugi…6.1
• CVE-2022-25370Apache OFBiz uses the Birt plugin (https://eclipse.github.io…5.4
• CVE-2022-25371Apache OFBiz uses the Birt project plugin (https://eclipse.g…9.8
• CVE-2022-25372Pritunl Client through 1.2.3019.52 on Windows allows local p…7.8
• CVE-2022-25373Zoho ManageEngine SupportCenter Plus before 11020 allows Sto…5.4