Skip to content

CWE-1423 · weakness in Access Control

Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution

7 CVEs

Out of date: the sync last ran 3 hours ago. Newer CVEs and scores may be missing from the map.

Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.

Every one of the 7 is a mark on the map. Named now: 1 to 7, most at risk first.

  1. CVE-2024-2201Xen · CVSS 4.7 · 8.8% likely

    Xen

  2. Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution in the indirect branch predictors for some Intel(R) Proce…CVE-2024-45332Intel(R) Processors · CVSS 5.6 · 0.3% likely
  3. Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel(R) Core™ processors (10th Generation) may…CVE-2025-20623Intel(R) Core™ processors (10th Generation) · CVSS 5.6 · 0.2% likely
  4. Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel Atom(R) processors may allow an authentica…CVE-2024-43420Intel Atom(R) processors · CVSS 5.6 · 0.2% likely
  5. Spectre-BSECVE-2024-10929Arm · CVSS 5.1 · 0.2% likely

    Arm Ltd

  6. NVIDIA Jetson Linux contains a vulnerability in the kernel where an attacker may cause an exposure of sensitive information due to a shared microarchitectural predictor state that…CVE-2025-23269NVIDIA · CVSS 4.7 · 0.2% likely

    NVIDIA

  7. Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution for some Intel(R) Processors within VMX non-root (guest)…CVE-2025-35979Intel(R) Processors · CVSS 6.8 · 0.1% likely

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

Updated AboutDevelopersSign in