| CVE | Alias(es) | CPUs Affected | Speculative Trigger | Impact | Mitigations | References |
|---|
| CVE-2017-5753 | Spectre V1 | Intel
ARM | Branch prediction bounds check bypass | Cross- and intra-process (including kernel) memory disclosure | OS
Compiler
Browser | https://www.kb.cert.org/vuls/id/584653
https://www.intel.com/content/www/us/en/architecture-and-technology/facts-about-side-channel-analysis-and-intel-products.html
https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability |
| CVE-2017-5715 | Spectre V2 | Intel
AMD
ARM | Branch target injection | Cross- and intra-process (including kernel) memory disclosure | Microcode | https://www.kb.cert.org/vuls/id/584653
https://www.intel.com/content/www/us/en/architecture-and-technology/facts-about-side-channel-analysis-and-intel-products.html
https://www.amd.com/en/corporate/security-updates
https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability |
| CVE-2017-5754 | Spectre V3
Meltdown | Intel | Out-of-order execution | Kernel memory disclosure to userspace | OS | https://www.kb.cert.org/vuls/id/584653
https://www.intel.com/content/www/us/en/architecture-and-technology/facts-about-side-channel-analysis-and-intel-products.html |
| CVE-2018-3640 | Spectre V3a (RSRE) | Intel
ARM | System register read | Disclosure of system register values | Microcode | https://www.kb.cert.org/vuls/id/180049
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00115.html
https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability |
| CVE-2018-3639 | Spectre V4 (SSB) | Intel
AMD
ARM
| Memory reads before prior memory write addresses known | Cross- and intra-process (including kernel) memory disclosure | OS
Microcode | https://www.kb.cert.org/vuls/id/180049
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00115.html
https://www.amd.com/en/corporate/security-updates
https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability |
| CVE-2018-3665 | Lazy FP | Intel | Lazy Lazy FPU state restore | Leak of FPU state | OS | https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00145.html |