{"id":"CVE-2018-9056","aliases":["EUVD-2018-20660","GHSA-p3vf-w52m-259m"],"status":"published","title":"Systems with microprocessors utilizing speculative execution may allow unauthorized disclosure of...","description":"Systems with microprocessors utilizing speculative execution may allow unauthorized disclosure of information to an attacker with local user access via a side-channel attack on the directional branch predictor, as demonstrated by a pattern history table (PHT), aka BranchScope.","severity":{"version":"3.0","score":5.6,"vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.00703,"percentile":0.53526,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-200"],"published":"2018-03-27T17:00:00Z","modified":"2026-06-17T02:05:59Z","products":[{"vendor":"arm","product":"cortex-a"},{"vendor":"intel","product":"atom_c"},{"vendor":"intel","product":"atom_e"},{"vendor":"intel","product":"atom_x3"},{"vendor":"intel","product":"atom_z"},{"vendor":"intel","product":"celeron_j"},{"vendor":"intel","product":"celeron_n"},{"vendor":"intel","product":"core_i3"},{"vendor":"intel","product":"core_i5"},{"vendor":"intel","product":"core_i7"},{"vendor":"intel","product":"core_m"},{"vendor":"intel","product":"core_m3"},{"vendor":"intel","product":"core_m5"},{"vendor":"intel","product":"core_m7"},{"vendor":"intel","product":"pentium_j"},{"vendor":"intel","product":"pentium_n"},{"vendor":"intel","product":"xeon"},{"vendor":"intel","product":"xeon_bronze_3104"},{"vendor":"intel","product":"xeon_bronze_3106"},{"vendor":"intel","product":"xeon_e-1105c"},{"vendor":"intel","product":"xeon_e3"},{"vendor":"intel","product":"xeon_e3_1105c_v2"},{"vendor":"intel","product":"xeon_e3_1125c"},{"vendor":"intel","product":"xeon_e3_1125c_v2"},{"vendor":"intel","product":"xeon_e3_1220"},{"vendor":"intel","product":"xeon_e3_12201"},{"vendor":"intel","product":"xeon_e3_12201_v2"},{"vendor":"intel","product":"xeon_e3_1220_v2"},{"vendor":"intel","product":"xeon_e3_1220_v3"},{"vendor":"intel","product":"xeon_e3_1220_v5"},{"vendor":"intel","product":"xeon_e3_1220_v6"},{"vendor":"intel","product":"xeon_e3_1220l_v3"},{"vendor":"intel","product":"xeon_e3_1225"},{"vendor":"intel","product":"xeon_e3_1225_v2"},{"vendor":"intel","product":"xeon_e3_1225_v3"},{"vendor":"intel","product":"xeon_e3_1225_v5"},{"vendor":"intel","product":"xeon_e3_1225_v6"},{"vendor":"intel","product":"xeon_e3_1226_v3"},{"vendor":"intel","product":"xeon_e3_1230"},{"vendor":"intel","product":"xeon_e3_1230_v2"},{"vendor":"intel","product":"xeon_e3_1230_v3"},{"vendor":"intel","product":"xeon_e3_1230_v5"},{"vendor":"intel","product":"xeon_e3_1230_v6"},{"vendor":"intel","product":"xeon_e3_1230l_v3"},{"vendor":"intel","product":"xeon_e3_1231_v3"},{"vendor":"intel","product":"xeon_e3_1235"},{"vendor":"intel","product":"xeon_e3_1235l_v5"},{"vendor":"intel","product":"xeon_e3_1240"},{"vendor":"intel","product":"xeon_e3_1240_v2"},{"vendor":"intel","product":"xeon_e3_1240_v3"},{"vendor":"intel","product":"xeon_e3_1240_v5"},{"vendor":"intel","product":"xeon_e3_1240_v6"},{"vendor":"intel","product":"xeon_e3_1240l_v3"},{"vendor":"intel","product":"xeon_e3_1240l_v5"},{"vendor":"intel","product":"xeon_e3_1241_v3"},{"vendor":"intel","product":"xeon_e3_1245"},{"vendor":"intel","product":"xeon_e3_1245_v2"},{"vendor":"intel","product":"xeon_e3_1245_v3"},{"vendor":"intel","product":"xeon_e3_1245_v5"},{"vendor":"intel","product":"xeon_e3_1245_v6"},{"vendor":"intel","product":"xeon_e3_1246_v3"},{"vendor":"intel","product":"xeon_e3_1258l_v4"},{"vendor":"intel","product":"xeon_e3_1260l"},{"vendor":"intel","product":"xeon_e3_1260l_v5"},{"vendor":"intel","product":"xeon_e3_1265l_v2"},{"vendor":"intel","product":"xeon_e3_1265l_v3"},{"vendor":"intel","product":"xeon_e3_1265l_v4"},{"vendor":"intel","product":"xeon_e3_1268l_v3"},{"vendor":"intel","product":"xeon_e3_1268l_v5"},{"vendor":"intel","product":"xeon_e3_1270"},{"vendor":"intel","product":"xeon_e3_1270_v2"},{"vendor":"intel","product":"xeon_e3_1270_v3"},{"vendor":"intel","product":"xeon_e3_1270_v5"},{"vendor":"intel","product":"xeon_e3_1270_v6"},{"vendor":"intel","product":"xeon_e3_1271_v3"},{"vendor":"intel","product":"xeon_e3_1275"},{"vendor":"intel","product":"xeon_e3_1275_v2"},{"vendor":"intel","product":"xeon_e3_1275_v3"},{"vendor":"intel","product":"xeon_e3_1275_v5"},{"vendor":"intel","product":"xeon_e3_1275_v6"},{"vendor":"intel","product":"xeon_e3_1275l_v3"},{"vendor":"intel","product":"xeon_e3_1276_v3"},{"vendor":"intel","product":"xeon_e3_1278l_v4"},{"vendor":"intel","product":"xeon_e3_1280"},{"vendor":"intel","product":"xeon_e3_1280_v2"},{"vendor":"intel","product":"xeon_e3_1280_v3"},{"vendor":"intel","product":"xeon_e3_1280_v5"},{"vendor":"intel","product":"xeon_e3_1280_v6"},{"vendor":"intel","product":"xeon_e3_1281_v3"},{"vendor":"intel","product":"xeon_e3_1285_v3"},{"vendor":"intel","product":"xeon_e3_1285_v4"},{"vendor":"intel","product":"xeon_e3_1285_v6"},{"vendor":"intel","product":"xeon_e3_1285l_v3"},{"vendor":"intel","product":"xeon_e3_1285l_v4"},{"vendor":"intel","product":"xeon_e3_1286_v3"},{"vendor":"intel","product":"xeon_e3_1286l_v3"},{"vendor":"intel","product":"xeon_e3_1290"},{"vendor":"intel","product":"xeon_e3_1290_v2"},{"vendor":"intel","product":"xeon_e3_1501l_v6"},{"vendor":"intel","product":"xeon_e3_1501m_v6"},{"vendor":"intel","product":"xeon_e3_1505l_v5"},{"vendor":"intel","product":"xeon_e3_1505l_v6"},{"vendor":"intel","product":"xeon_e3_1505m_v5"},{"vendor":"intel","product":"xeon_e5"},{"vendor":"intel","product":"xeon_e5_1428l"},{"vendor":"intel","product":"xeon_e5_1428l_v2"},{"vendor":"intel","product":"xeon_e5_1428l_v3"},{"vendor":"intel","product":"xeon_e5_1620"},{"vendor":"intel","product":"xeon_e5_1620_v2"},{"vendor":"intel","product":"xeon_e5_1620_v3"},{"vendor":"intel","product":"xeon_e5_1620_v4"},{"vendor":"intel","product":"xeon_e5_1630_v3"},{"vendor":"intel","product":"xeon_e5_1630_v4"},{"vendor":"intel","product":"xeon_e5_1650"},{"vendor":"intel","product":"xeon_e5_1650_v2"},{"vendor":"intel","product":"xeon_e5_1650_v3"},{"vendor":"intel","product":"xeon_e5_1650_v4"},{"vendor":"intel","product":"xeon_e5_1660"},{"vendor":"intel","product":"xeon_e5_1660_v2"},{"vendor":"intel","product":"xeon_e5_1660_v3"},{"vendor":"intel","product":"xeon_e5_1660_v4"},{"vendor":"intel","product":"xeon_e5_1680_v3"},{"vendor":"intel","product":"xeon_e5_1680_v4"},{"vendor":"intel","product":"xeon_e5_2403"},{"vendor":"intel","product":"xeon_e5_2403_v2"},{"vendor":"intel","product":"xeon_e5_2407"},{"vendor":"intel","product":"xeon_e5_2407_v2"},{"vendor":"intel","product":"xeon_e5_2408l_v3"},{"vendor":"intel","product":"xeon_e5_2418l"},{"vendor":"intel","product":"xeon_e5_2418l_v2"},{"vendor":"intel","product":"xeon_e5_2418l_v3"},{"vendor":"intel","product":"xeon_e5_2420"},{"vendor":"intel","product":"xeon_e5_2420_v2"},{"vendor":"intel","product":"xeon_e5_2428l"},{"vendor":"intel","product":"xeon_e5_2428l_v2"},{"vendor":"intel","product":"xeon_e5_2428l_v3"},{"vendor":"intel","product":"xeon_e5_2430"},{"vendor":"intel","product":"xeon_e5_2430_v2"},{"vendor":"intel","product":"xeon_e5_2430l"},{"vendor":"intel","product":"xeon_e5_2430l_v2"},{"vendor":"intel","product":"xeon_e5_2438l_v3"},{"vendor":"intel","product":"xeon_e5_2440"},{"vendor":"intel","product":"xeon_e5_2440_v2"},{"vendor":"intel","product":"xeon_e5_2448l"},{"vendor":"intel","product":"xeon_e5_2448l_v2"},{"vendor":"intel","product":"xeon_e5_2450"},{"vendor":"intel","product":"xeon_e5_2450_v2"},{"vendor":"intel","product":"xeon_e5_2450l"},{"vendor":"intel","product":"xeon_e5_2450l_v2"},{"vendor":"intel","product":"xeon_e5_2470"},{"vendor":"intel","product":"xeon_e5_2470_v2"},{"vendor":"intel","product":"xeon_e5_2603"},{"vendor":"intel","product":"xeon_e5_2603_v2"},{"vendor":"intel","product":"xeon_e5_2603_v3"},{"vendor":"intel","product":"xeon_e5_2603_v4"},{"vendor":"intel","product":"xeon_e5_2608l_v3"},{"vendor":"intel","product":"xeon_e5_2608l_v4"},{"vendor":"intel","product":"xeon_e5_2609"},{"vendor":"intel","product":"xeon_e5_2609_v2"},{"vendor":"intel","product":"xeon_e5_2609_v3"},{"vendor":"intel","product":"xeon_e5_2609_v4"},{"vendor":"intel","product":"xeon_e5_2618l_v2"},{"vendor":"intel","product":"xeon_e5_2618l_v3"},{"vendor":"intel","product":"xeon_e5_2618l_v4"},{"vendor":"intel","product":"xeon_e5_2620"},{"vendor":"intel","product":"xeon_e5_2620_v2"},{"vendor":"intel","product":"xeon_e5_2620_v3"},{"vendor":"intel","product":"xeon_e5_2620_v4"},{"vendor":"intel","product":"xeon_e5_2623_v3"},{"vendor":"intel","product":"xeon_e5_2623_v4"},{"vendor":"intel","product":"xeon_e5_2628l_v2"},{"vendor":"intel","product":"xeon_e5_2628l_v3"},{"vendor":"intel","product":"xeon_e5_2628l_v4"},{"vendor":"intel","product":"xeon_e5_2630"},{"vendor":"intel","product":"xeon_e5_2630_v2"},{"vendor":"intel","product":"xeon_e5_2630_v3"},{"vendor":"intel","product":"xeon_e5_2630_v4"},{"vendor":"intel","product":"xeon_e5_2630l"},{"vendor":"intel","product":"xeon_e5_2630l_v2"},{"vendor":"intel","product":"xeon_e5_2630l_v3"},{"vendor":"intel","product":"xeon_e5_2630l_v4"},{"vendor":"intel","product":"xeon_e5_2637"},{"vendor":"intel","product":"xeon_e5_2637_v2"},{"vendor":"intel","product":"xeon_e5_2637_v3"},{"vendor":"intel","product":"xeon_e5_2637_v4"},{"vendor":"intel","product":"xeon_e5_2640"},{"vendor":"intel","product":"xeon_e5_2640_v2"},{"vendor":"intel","product":"xeon_e5_2640_v3"},{"vendor":"intel","product":"xeon_e5_2640_v4"},{"vendor":"intel","product":"xeon_e5_2643"},{"vendor":"intel","product":"xeon_e5_2643_v2"},{"vendor":"intel","product":"xeon_e5_2643_v3"},{"vendor":"intel","product":"xeon_e5_2643_v4"},{"vendor":"intel","product":"xeon_e5_2648l"},{"vendor":"intel","product":"xeon_e5_2648l_v2"},{"vendor":"intel","product":"xeon_e5_2648l_v3"},{"vendor":"intel","product":"xeon_e5_2648l_v4"},{"vendor":"intel","product":"xeon_e5_2650"},{"vendor":"intel","product":"xeon_e5_2650_v2"},{"vendor":"intel","product":"xeon_e5_2650_v3"},{"vendor":"intel","product":"xeon_e5_2650_v4"},{"vendor":"intel","product":"xeon_e5_2650l"},{"vendor":"intel","product":"xeon_e5_2650l_v2"},{"vendor":"intel","product":"xeon_e5_2650l_v3"},{"vendor":"intel","product":"xeon_e7"},{"vendor":"intel","product":"xeon_gold"},{"vendor":"intel","product":"xeon_phi"},{"vendor":"intel","product":"xeon_platinum"},{"vendor":"intel","product":"xeon_silver"}],"references":[{"url":"http://www.cs.ucr.edu/~nael/pubs/asplos18.pdf","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory"]},{"url":"https://arstechnica.com/gadgets/2018/03/its-not-just-spectre-researchers-reveal-more-branch-prediction-attacks/","tags":["x_refsource_MISC","x_transferred","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-9056"},{"url":"https://github.com/advisories/GHSA-p3vf-w52m-259m"}],"sources":{"cve":[{"id":"CVE-2018-9056","description":"Systems with microprocessors utilizing speculative execution may allow unauthorized disclosure of information to an attacker with local user access via a side-channel attack on the directional branch predictor, as demonstrated by a pattern history table (PHT), aka BranchScope.","status":"published","published":"2018-03-27T17:00:00Z","modified":"2024-08-05T07:10:47.46Z","updated_at":"2026-11-02T14:35:02.603326Z"}],"euvd":[{"id":"EUVD-2018-20660","description":"Systems with microprocessors utilizing speculative execution may allow unauthorized disclosure of information to an attacker with local user access via a side-channel attack on the directional branch predictor, as demonstrated by a pattern history table (PHT), aka BranchScope.","status":"published","published":"2018-03-27T17:00:00Z","modified":"2024-08-05T07:10:47Z","updated_at":"2026-11-03T02:40:00.889185Z"}],"ghsa":[{"id":"GHSA-p3vf-w52m-259m","title":"Systems with microprocessors utilizing speculative execution may allow unauthorized disclosure of...","description":"Systems with microprocessors utilizing speculative execution may allow unauthorized disclosure of information to an attacker with local user access via a side-channel attack on the directional branch predictor, as demonstrated by a pattern history table (PHT), aka BranchScope.","status":"published","published":"2022-05-13T01:27:02Z","modified":"2023-02-01T05:07:50Z","cvss":[{"version":"3.0","score":5.6,"vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:50:37.203795Z"}],"nvd":[{"id":"CVE-2018-9056","description":"Systems with microprocessors utilizing speculative execution may allow unauthorized disclosure of information to an attacker with local user access via a side-channel attack on the directional branch predictor, as demonstrated by a pattern history table (PHT), aka BranchScope.","status":"published","published":"2018-03-27T17:29:00.82Z","modified":"2026-06-17T02:05:59.89Z","cvss":[{"version":"3.0","score":5.6,"vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4.7,"vector":"AV:L/AC:M/Au:N/C:C/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:04:24.700429Z"}]}}