581 matches found
Supporting Secured Integration of Microarchitectural Defenses
There has been a plethora of microarchitectural-level attacks leading to many proposed countermeasures. This has created an unexpected and unaddressed security issue where naive integration of those defenses can potentially lead to security vulnerabilities. This occurs when one defense changes an...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000270)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000270 advisory. Microarchitectural Data Sampling Uncacheable Memory MDSUM: Uncacheable memory on some microprocessors utilizing speculative execution may allow an authenticated user...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000414)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000414 advisory. Microarchitectural Load Port Data Sampling MLPDS: Load ports on some microprocessors utilizing speculative execution may allow an authenticated user to potentially...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000209)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000209 advisory. Microarchitectural Fill Buffer Data Sampling MFBDS: Fill buffers on some microprocessors utilizing speculative execution may allow an authenticated user to potential...
Siemens SIMATIC Devices Information Exposure through Microarchitectural State after Transient Execution (CVE-2023-28746)
Information exposure through microarchitectural state after transient execution from some register files for some IntelR AtomR Processors may allow an authenticated user to potentially enable information disclosure via local access. This plugin only works with Tenable.ot. Please visit...
ShuffleV: A Microarchitectural Defense Strategy against Electromagnetic Side-Channel Attacks in Microprocessors
The run-time electromagnetic EM emanation of microprocessors presents a side-channel that leaks the confidentiality of the applications running on them. Many recent works have demonstrated successful attacks leveraging such side-channels to extract the confidentiality of diverse applications, suc...
EUVD-2021-19835
Malware in sbrugna...
EUVD-2018-4104
Malware in sbrugna...
EUVD-2019-2795
Malware in sbrugna...
EUVD-2018-4108
Malware in sbrugna...
EUVD-2018-4105
Malware in sbrugna...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414464)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414464 advisory. Incomplete cleanup of microarchitectural fill buffers on some IntelR Processors may allow an authenticated user to potentially enable information disclosure via loca...
EUVD-2022-26374
Malicious code in bioql PyPI...
EUVD-2023-45111
Malicious code in bioql PyPI...
EUVD-2025-14606
Malicious code in bioql PyPI...
EUVD-2023-24772
Malicious code in bioql PyPI...
EUVD-2025-14599
Malicious code in bioql PyPI...
EUVD-2023-32384
Malicious code in bioql PyPI...
Voltage Fault Injection on SEV Virtual Machines
Summary Researchers shared with AMD a report titled “Voltage Fault Injection on SEV-protected Virtual Machines.” The report noted a Voltage Fault Injection VFI attack targeting AMD EPYC™ 7272 CPUs running Secure Encrypted Virtualization SEV protected virtual machines VMs. Physical attacks such as...
Microarchitectural Attacks on the Stack Engine
Summary Researchers from ETH Zurich have published a paper titled “One Flew over the Stack Engine’s Nest: Practical Microarchitectural Attacks on the Stack Engine.” AMD continues to recommend software developers employ existing best practices including constant time algorithm and avoid...