Core M

Vendor:

First CVE: Jan 4, 2018 · Active for 8 years

10

Total CVEs

More Total CVEs than 88% of tracked products

10.0

Avg CVEs / Year

Higher CVE frequency than 96% of tracked products

5.6

Avg CVSS

Higher Avg CVSS than 16% of tracked products

0.0%

KEV Rate

Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Core M over time

Volume of CVEsAvg CVSS Base Score

First CVE

Jan 4, 2018

8 years ago

Most Recent CVE

Aug 14, 2018

2,901 days ago

CVE Severity & Scoring

Core M10 CVEs

100%

All CVEs352,231 CVEs

45%

40%

11%

Medium

Attack Vector

Local10 (100.0%)

Network0 (0.0%)

Unknown0 (0.0%)

Physical0 (0.0%)

Adjacent Network0 (0.0%)

Attack Complexity

Low1 (10.0%)

High9 (90.0%)

Unknown0 (0.0%)

User Interaction

None10 (100.0%)

Unknown0 (0.0%)

Required0 (0.0%)

Privileges Required

Low10 (100.0%)

High0 (0.0%)

None0 (0.0%)

Unknown0 (0.0%)

Top CVEs

Signals from CVEs in this product scope (10 CVEs).

10 CVEs · Highest risk first

CVE	Published	CVSS	Risk	KEV	Exploit
CVE-2017-5753MEDIUM Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side	Jan 4, 2018	5.6	83	NO	YES
CVE-2017-5715MEDIUM Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access v	Jan 4, 2018	5.6	74	NO	YES
CVE-2017-5754MEDIUM Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access v	Jan 4, 2018	5.6	71	NO	NO
CVE-2018-3639MEDIUM Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthori	May 22, 2018	5.5	65	NO	YES
CVE-2018-3646MEDIUM Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data cache to an attacker	Aug 14, 2018	5.6	25	NO	NO
CVE-2018-3640MEDIUM Systems with microprocessors utilizing speculative execution and that perform speculative reads of system registers may allow unauthorized disclosure of system parameters to an att	May 22, 2018	5.6	25	NO	NO
CVE-2018-3693MEDIUM Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a spec	Jul 10, 2018	5.6	24	NO	NO
CVE-2018-3620MEDIUM Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data cache to an attacker	Aug 14, 2018	5.6	23	NO	NO
CVE-2018-3665MEDIUM System software utilizing Lazy FP state restore technique on systems using Intel Core-based microprocessors may potentially allow a local process to infer data from another process	Jun 21, 2018	5.6	20	NO	NO
CVE-2018-9056MEDIUM Systems with microprocessors utilizing speculative execution may allow unauthorized disclosure of information to an attacker with local user access via a side-channel attack on the	Mar 27, 2018	5.6	20	NO	NO

View all 10 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (10 CVEs).

CISA KEV

0 CVEs

0.0% of CVEs· Bottom 1%

Metasploit

0 CVEs

0.0% of CVEs· Bottom 1%

Nuclei

0 CVEs

0.0% of CVEs· Bottom 1%

ExploitDB

3 CVEs

30.0% of CVEs· 90th percentile

Social Chatter

Signals from CVEs in this product scope (10 CVEs).

Media Mentions

Signals from CVEs in this product scope (10 CVEs).

Top CNAs Publishing CVEs For Core M

Top CWEs

Versions

Version	CVE Count	Avg CVSS	Avg EPSS	Exploits
5y71	8	5.6	34.4%	2
5y70	8	5.6	34.4%	2
5y51	8	5.6	34.4%	2
5y31	8	5.6	34.4%	2
5y10c	8	5.6	34.4%	2
5y10a	8	5.6	34.4%	2
5y10	8	5.6	34.4%	2
45nm	2	5.5	34.1%	1
32nm	2	5.5	34.1%	1