CWE-1420 · Access Control
Exposure of Sensitive Information during Transient Execution
5CVEs
SortMost likely exploited
5 CVEs with CWE-1420 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2024-36348A transient execution vulnerability in some AMD processors may allow a user process to infer the control registers speculatively even if UMIP feature is enabled, potentially resul…AMD · AMD EPYC™ 7002 Series Processors · CVSS 3.8 · 2025-07-08 | 3.8 | 0.3% | 2025-07-08 |
| CVE-2024-36349A transient execution vulnerability in some AMD processors may allow a user process to infer TSC_AUX even when such a read is disabled, potentially resulting in information leakag…AMD · AMD EPYC™ 7002 Series Processors · CVSS 3.8 · 2025-07-08 | 3.8 | 0.2% | 2025-07-08 |
| CVE-2025-54505A transient execution vulnerability within AMD CPUs may allow a local user-privileged attacker to leak data via the floating point divisor unit, potentially resulting in loss of c…AMD · AMD EPYC™ 7001 Series Processors · CVSS 2 · 2026-04-27 | 2.0 | 0.2% | 2026-04-27 |
| CVE-2026-18448Leak SMM RAM from the kernel (Simply TSA after an SMI)TianoCore · EDK2 · CVSS 5.6 · 2026-11-10 | 5.6 | 0.1% | 2026-11-10 |
| CVE-2025-27572Exposure of sensitive information during transient execution for some TDX within Ring 0: Hypervisor may allow an information disclosure. Authorized adversary with a privileged use…TDX · CVSS 4.1 · 2026-02-10 | 4.1 | 0.1% | 2026-02-10 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.