CVE-2018-9056
Systems with microprocessors utilizing speculative execution may allow unauthorized disclosure of...
Systems with microprocessors utilizing speculative execution may allow unauthorized disclosure of information to an attacker with local user access via a side-channel attack on the directional branch predictor, as demonstrated by a pattern history table (PHT), aka BranchScope.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- High
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- None
- Availability
- None
Exploit likelihood
What each source reports
NVD Score used
Systems with microprocessors utilizing speculative execution may allow unauthorized disclosure of information to an attacker with local user access via a side-channel attack on the directional branch predictor, as demonstrated by a pattern history table (PHT), aka BranchScope.
- Record
CVE-2018-9056- CVSS 3.0
- 5.6 Medium
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N - CVSS 2.0
- 4.7 Medium
AV:L/AC:M/Au:N/C:C/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
CVE List No score
Systems with microprocessors utilizing speculative execution may allow unauthorized disclosure of information to an attacker with local user access via a side-channel attack on the directional branch predictor, as demonstrated by a pattern history table (PHT), aka BranchScope.
- Record
CVE-2018-9056- Updated
- 2026-11-02
EUVDEUVD-2018-20660 No score
Systems with microprocessors utilizing speculative execution may allow unauthorized disclosure of information to an attacker with local user access via a side-channel attack on the directional branch predictor, as demonstrated by a pattern history table (PHT), aka BranchScope.
- Record
EUVD-2018-20660- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-p3vf-w52m-259m
Systems with microprocessors utilizing speculative execution may allow unauthorized disclosure of...
Systems with microprocessors utilizing speculative execution may allow unauthorized disclosure of information to an attacker with local user access via a side-channel attack on the directional branch predictor, as demonstrated by a pattern history table (PHT), aka BranchScope.
- Record
GHSA-p3vf-w52m-259m- CVSS 3.0
- 5.6 Medium
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
Affected products
- arm cortex-a
- intel atom c
- intel atom e
- intel atom x3
- intel atom z
- intel celeron j
- intel celeron n
- intel core i3
- intel core i5
- intel core i7
- intel core m
- intel core m3
Show 197 moreShow less
- intel core m5
- intel core m7
- intel pentium j
- intel pentium n
- intel xeon
- intel xeon bronze 3104
- intel xeon bronze 3106
- intel xeon e-1105c
- intel xeon e3
- intel xeon e3 1105c v2
- intel xeon e3 1125c
- intel xeon e3 1125c v2
- intel xeon e3 1220
- intel xeon e3 12201
- intel xeon e3 12201 v2
- intel xeon e3 1220 v2
- intel xeon e3 1220 v3
- intel xeon e3 1220 v5
- intel xeon e3 1220 v6
- intel xeon e3 1220l v3
- intel xeon e3 1225
- intel xeon e3 1225 v2
- intel xeon e3 1225 v3
- intel xeon e3 1225 v5
- intel xeon e3 1225 v6
- intel xeon e3 1226 v3
- intel xeon e3 1230
- intel xeon e3 1230 v2
- intel xeon e3 1230 v3
- intel xeon e3 1230 v5
- intel xeon e3 1230 v6
- intel xeon e3 1230l v3
- intel xeon e3 1231 v3
- intel xeon e3 1235
- intel xeon e3 1235l v5
- intel xeon e3 1240
- intel xeon e3 1240 v2
- intel xeon e3 1240 v3
- intel xeon e3 1240 v5
- intel xeon e3 1240 v6
- intel xeon e3 1240l v3
- intel xeon e3 1240l v5
- intel xeon e3 1241 v3
- intel xeon e3 1245
- intel xeon e3 1245 v2
- intel xeon e3 1245 v3
- intel xeon e3 1245 v5
- intel xeon e3 1245 v6
- intel xeon e3 1246 v3
- intel xeon e3 1258l v4
- intel xeon e3 1260l
- intel xeon e3 1260l v5
- intel xeon e3 1265l v2
- intel xeon e3 1265l v3
- intel xeon e3 1265l v4
- intel xeon e3 1268l v3
- intel xeon e3 1268l v5
- intel xeon e3 1270
- intel xeon e3 1270 v2
- intel xeon e3 1270 v3
- intel xeon e3 1270 v5
- intel xeon e3 1270 v6
- intel xeon e3 1271 v3
- intel xeon e3 1275
- intel xeon e3 1275 v2
- intel xeon e3 1275 v3
- intel xeon e3 1275 v5
- intel xeon e3 1275 v6
- intel xeon e3 1275l v3
- intel xeon e3 1276 v3
- intel xeon e3 1278l v4
- intel xeon e3 1280
- intel xeon e3 1280 v2
- intel xeon e3 1280 v3
- intel xeon e3 1280 v5
- intel xeon e3 1280 v6
- intel xeon e3 1281 v3
- intel xeon e3 1285 v3
- intel xeon e3 1285 v4
- intel xeon e3 1285 v6
- intel xeon e3 1285l v3
- intel xeon e3 1285l v4
- intel xeon e3 1286 v3
- intel xeon e3 1286l v3
- intel xeon e3 1290
- intel xeon e3 1290 v2
- intel xeon e3 1501l v6
- intel xeon e3 1501m v6
- intel xeon e3 1505l v5
- intel xeon e3 1505l v6
- intel xeon e3 1505m v5
- intel xeon e5
- intel xeon e5 1428l
- intel xeon e5 1428l v2
- intel xeon e5 1428l v3
- intel xeon e5 1620
- intel xeon e5 1620 v2
- intel xeon e5 1620 v3
- intel xeon e5 1620 v4
- intel xeon e5 1630 v3
- intel xeon e5 1630 v4
- intel xeon e5 1650
- intel xeon e5 1650 v2
- intel xeon e5 1650 v3
- intel xeon e5 1650 v4
- intel xeon e5 1660
- intel xeon e5 1660 v2
- intel xeon e5 1660 v3
- intel xeon e5 1660 v4
- intel xeon e5 1680 v3
- intel xeon e5 1680 v4
- intel xeon e5 2403
- intel xeon e5 2403 v2
- intel xeon e5 2407
- intel xeon e5 2407 v2
- intel xeon e5 2408l v3
- intel xeon e5 2418l
- intel xeon e5 2418l v2
- intel xeon e5 2418l v3
- intel xeon e5 2420
- intel xeon e5 2420 v2
- intel xeon e5 2428l
- intel xeon e5 2428l v2
- intel xeon e5 2428l v3
- intel xeon e5 2430
- intel xeon e5 2430 v2
- intel xeon e5 2430l
- intel xeon e5 2430l v2
- intel xeon e5 2438l v3
- intel xeon e5 2440
- intel xeon e5 2440 v2
- intel xeon e5 2448l
- intel xeon e5 2448l v2
- intel xeon e5 2450
- intel xeon e5 2450 v2
- intel xeon e5 2450l
- intel xeon e5 2450l v2
- intel xeon e5 2470
- intel xeon e5 2470 v2
- intel xeon e5 2603
- intel xeon e5 2603 v2
- intel xeon e5 2603 v3
- intel xeon e5 2603 v4
- intel xeon e5 2608l v3
- intel xeon e5 2608l v4
- intel xeon e5 2609
- intel xeon e5 2609 v2
- intel xeon e5 2609 v3
- intel xeon e5 2609 v4
- intel xeon e5 2618l v2
- intel xeon e5 2618l v3
- intel xeon e5 2618l v4
- intel xeon e5 2620
- intel xeon e5 2620 v2
- intel xeon e5 2620 v3
- intel xeon e5 2620 v4
- intel xeon e5 2623 v3
- intel xeon e5 2623 v4
- intel xeon e5 2628l v2
- intel xeon e5 2628l v3
- intel xeon e5 2628l v4
- intel xeon e5 2630
- intel xeon e5 2630 v2
- intel xeon e5 2630 v3
- intel xeon e5 2630 v4
- intel xeon e5 2630l
- intel xeon e5 2630l v2
- intel xeon e5 2630l v3
- intel xeon e5 2630l v4
- intel xeon e5 2637
- intel xeon e5 2637 v2
- intel xeon e5 2637 v3
- intel xeon e5 2637 v4
- intel xeon e5 2640
- intel xeon e5 2640 v2
- intel xeon e5 2640 v3
- intel xeon e5 2640 v4
- intel xeon e5 2643
- intel xeon e5 2643 v2
- intel xeon e5 2643 v3
- intel xeon e5 2643 v4
- intel xeon e5 2648l
- intel xeon e5 2648l v2
- intel xeon e5 2648l v3
- intel xeon e5 2648l v4
- intel xeon e5 2650
- intel xeon e5 2650 v2
- intel xeon e5 2650 v3
- intel xeon e5 2650 v4
- intel xeon e5 2650l
- intel xeon e5 2650l v2
- intel xeon e5 2650l v3
- intel xeon e7
- intel xeon gold
- intel xeon phi
- intel xeon platinum
- intel xeon silver
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2018-9056 is a medium vulnerability (CVSS 5.6) in Arm Cortex-a, published March 27, 2018. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.70%, the 53rd percentile. No source names a fixed version.