trevex

Trevex - The Transient Execution Vulnerability Explorer Supported Platforms We support the following environments: OS / Distros Trevex is developed and tested on Ubuntu 22.04 LTS and 24.04 LTS. While other distros may work, some parts of the framework, e.g., the dependency checking and...

CVE-2026-0004

A transient execution vulnerability in some AMD processors may allow an attacker with the ability to execute code on the system to infer data in the L1D cache, potentially resulting in the leakage of sensitive information across privileged boundaries...

EUVD-2026-124645

A transient execution vulnerability in some AMD processors may allow an attacker with the ability to execute code on the system to infer data in the L1D cache, potentially resulting in the leakage of sensitive information across privileged boundaries...

CVE-2026-0004

A transient execution vulnerability in some AMD processors may allow an attacker with the ability to execute code on the system to infer data in the L1D cache, potentially resulting in the leakage of sensitive information across privileged boundaries...

CVE-2026-0004

CVE-2026-0004 is a transient execution vulnerability (specifically a TSA-Fill variant) affecting AMD Zen5 processors, including the Turin series (fifth-generation EPYC). The flaw allows an attacker with code execution capabilities on the system to infer data in the L1 data cache , potentially lea...

CVE-2026-0004: AMD: A transient execution vulnerability in some AMD processors may allow an attacker with the ability to execute code on…

A transient execution vulnerability in some AMD processors may allow an attacker with the ability to execute code on the system to infer data in the L1D cache, potentially resulting in the leakage of sensitive information across privileged boundaries...

CVE-2026-18448

EDK2 contains a vulnerability in BIOS where a privileged attacker may cause “Exposure of Sensitive Information during Transient Execution” by local access. Successful exploitation of this vulnerability may result in disclosure of SMRAM contents. It could also impact Confidentiality...

Transient Execution Vulnerability

CVE Details Refer to Glossary for explanation of terms CVE| CVE Description| CVSS Score ---|---|--- CVE-2026-0004| A transient execution vulnerability in some AMD processors may allow an attacker to infer data in the L1D cache, potentially resulting in the leakage of sensitive information across...

CLEANSTART-2024-YJ88399 Domain-bypass transient execution vulnerability in some Intel Atom(R) Processors may allow an authenticated user to potentially enable information disclosure via local access

Security vulnerability affects the intel-ucode package. Domain-bypass transient execution vulnerability in some Intel AtomR Processors may allow an authenticated user to potentially enable information disclosure via local access...

Astra Linux – vulnerability in linux-6.1, linux-6.12, amd64-microcode

A transient execution vulnerability in certain AMD processors may allow an attacker to infer data from previous stores, potentially leading to the leakage of privileged information...

Astra Linux – vulnerability in linux-6.1, linux-6.12, amd64-microcode

A transient execution vulnerability in certain AMD processors may enable an attacker to infer data from the L1D cache, potentially leading to the leakage of sensitive information across privileged boundaries...

Astra Linux – vulnerability in linux-5.10, linux-6.1, intel-microcode

Information exposure resulting from microarchitectural states following transient execution from certain register files on some IntelR AtomR processors may enable an authenticated user to potentially facilitate information disclosure via local access...

Astra Linux – Vulnerability in Intel Microcode

A domain-bypass transient execution vulnerability in some Intel AtomR processors may allow an authenticated user to potentially enable information disclosure through local access...

AlmaLinux 9.6 [TuxCare] Security Update: iwl100-firmware / iwl1000-firmware / iwl105-firmware / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2025:1766613623)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2025:1766613623 advisory. - A transient execution vulnerability in some AMD processors may allow an attacker to infer data from previous stores, potentially...

Rocky Linux 9.6 [TuxCare] Security Update: iwl100-firmware / iwl1000-firmware / iwl105-firmware / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2025:1766613623)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2025:1766613623 advisory. - A transient execution vulnerability in some AMD processors may allow an attacker to infer data from previous stores, potentially...

spectre-meltdown-checker v26.36.0913490

Spectre & Meltdown Checker A self-contained shell script to assess your system's resilience against the several transient execution CVEs that were published since early 2018, and give you guidance as to how to mitigate them. CVE list CVE| Name| Aliases ---|---|--- CVE-2017-5753| Bounds Check...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: microcode_ctl (UTSA-2026-091424)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-091424 advisory. Domain-bypass transient execution vulnerability in some Intel AtomR Processors may allow an authenticated user to potentially enable information disclosure via local...

CVE-2026-18796: Information Exposure through Microarchitectural State after Transient Execution

Any application that uses external QSPI flash for encrypted XIP on nRF5340 and relies on that encryption for confidentiality and/or integrity of the externally stored code. No specific nRF Connect SDK version is the root cause; the weakness is in the on-the-fly decryption scheme...

SUSE CVE-2026-20917

Exposure of sensitive information caused by incorrect data forwarding during transient execution for some IntelR Processors within Ring 0: Hypervisor and Kernel may allow information disclosure. System software adversary with a privileged user combined with a high complexity attack may enable dat...

Linux Distros Unpatched Vulnerability : CVE-2026-20917

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Exposure of sensitive information caused by incorrect data forwarding during transient execution for some IntelR Processors within Ring 0: Hypervisor and Kernel...