CVE-2024-28956
Last modified
CVE-2024-28956 is a medium-severity vulnerability rated 5.7/10 on the CVSS scale. Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.. EPSS estimates a 0.37% chance of exploitation in the next 30 days.
Description
Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
Metrics
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2024-28956?
How severe is CVE-2024-28956?
How do I fix CVE-2024-28956?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2024
- CVE-2024-28950Uncontrolled search path for some Intel(R) oneAPI Math Kerne…6.7
- CVE-2024-28951in OpenHarmony v4.0.0 and prior versions allow a local attac…7.8
- CVE-2024-28952Uncontrolled search path for some Intel(R) IPP software for …6.7
- CVE-2024-28953Uncontrolled search path in some EMON software before versio…6.7
- CVE-2024-28954Incorrect default permissions for some Intel(R) Graphics Dri…6.7
- CVE-2024-28955Affected devices create coredump files when crashed, storing…5.9
- CVE-2024-28957Generation of predictable identifiers issue exists in Cente …5.3
- CVE-2024-2896A vulnerability was found in Tenda AC7 15.03.06.44. It has b…8.8
- CVE-2024-28960An issue was discovered in Mbed TLS 2.18.0 through 2.28.x be…8.2
- CVE-2024-28961Dell OpenManage Enterprise, versions 4.0.0 and 4.0.1, contai…7.8
- CVE-2024-28962Dell Command | Update, Dell Update, and Alienware Update UWP…7.5
- CVE-2024-28963Telemetry Dashboard v1.0.0.7 for Dell ThinOS 2402 contains a…5.5
Are you affected by CVE-2024-28956?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST