CVE-2023-38575

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

Non-transparent sharing of return predictor targets between contexts in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-1303

Affected software

Vendor	Product	Versions
n/a	Intel(R) Processors	some Intel(R) Processors

References

Timeline

Published: Mar 14, 2024
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2023

CVE-2023-385768.0Hidden functionality vulnerability in LAN-WH300N/RE all versions provided by LOGITEC CORPORATION allows an authenticated user to execute arb CVE-2023-385798.8The cross-site request forgery token in the request may be predictable or easily guessable allowing attackers to craft a malicious request, CVE-2023-38586.1A vulnerability has been found in phpscriptpoint Car Listing 1.6 and classified as problematic. This vulnerability affects unknown code of t CVE-2023-385807.8The issue was addressed with improved memory handling. This issue is fixed in iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5, watchOS 9.6. An CVE-2023-385818.8Buffer overflow in Intel(R) Power Gadget software for Windows all versions may allow an authenticated user to potentially enable escalation CVE-2023-385825.4Persistent cross-site scripting (XSS) in the web application of MOD3GP-SY-120K allows an authenticated remote attacker to introduce arbitrar CVE-2023-385837.8A stack-based buffer overflow vulnerability exists in the LXT2 lxt2_rd_expand_integer_to_bits function of GTKWave 3.3.115. A specially craft CVE-2023-385849.8In Weintek's cMT3000 HMI Web CGI device, the cgi-bin command_wb.cgi contains a stack-based buffer overflow, which could allow an anonymous a CVE-2023-385858.8Improper authentication vulnerability in the CBC products allows a remote authenticated attacker to execute an arbitrary OS command on the d CVE-2023-3858610.0An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sonoma 14. A sandboxed process may be able CVE-2023-385877.8Improper input validation in some Intel NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via loca CVE-2023-385888.0Archer C3150 firmware versions prior to 'Archer C3150(JP)_V2_230511' allows a network-adjacent authenticated attacker to execute arbitrary O