CVE-2023-28746

MediumCVSS 6.5

Published: 14/03/2024(UTC)Updated: 14/10/2026(UTC)Translated: 15/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.55%

44th percentile - higher than 44% of all known CVEs

Summary

Information exposure through microarchitectural state after transient execution from some register files for some Intel(R) Atom(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

Risk Assessment

An attacker with local access could read data they should not have access to, potentially leading to disclosure of sensitive information processed on the same hardware.

Recommendation

Apply microcode updates and OS patches from the hardware and OS vendor, and restrict local access to trusted users.

Other vulnerabilities in Intel Atom Processors

CVE-2020-24513Medium
Domain-bypass transient execution vulnerability in some Intel Atom(R) Processors may allow an authenticated user to potentially enable information disclosure via local access. The flaw relates to processor speculative execution mechanisms.

Original NVD description (English source)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS