CVE-2026-0004

MediumCVSS 5.7/10Last modified Nov 12, 2026

Description

A transient execution vulnerability in some AMD processors may allow an attacker with the ability to execute code on the system to infer data in the L1D cache, potentially resulting in the leakage of sensitive information across privileged boundaries.

Metrics

CVSS 4.0 5.7/10CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
Nov 12, 2026
Last modified
Nov 12, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-00056.2In onServiceDisconnected of KeyguardServiceDelegate.java, there is a possible partial bypass of app pinning allowing limited interaction witCVE-2026-00069.8In multiple locations, there is a possible out of bounds read and write due to a heap buffer overflow. This could lead to remote code executCVE-2026-00078.6In writeToParcel of WindowInfo.cpp, there is a possible way to trick a user into accepting a permission due to a tapjacking/overlay attack. CVE-2026-00088.4In multiple functions of FaceEnroll.kt, there is a possible privilege escalation due to a confused deputy. This could lead to local escalatiCVE-2026-00097.8In multiple locations, there is a possible tapjacking due to a logic error in the code. This could lead to local escalation of privilege witCVE-2026-00108.4In onTransact of IDrmManagerService.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escCVE-2026-00118.4In enableSystemPackageLPw of Settings.java, there is a possible way to prevent location access from working due to a logic error in the codeCVE-2026-00126.2In setHideSensitive of ExpandableNotificationRow.java, there is a possible contact name leak due due to a logic error in the code. This coulCVE-2026-00138.4In setupLayout of PickActivity.java, there is a possible way to start any activity as a DocumentsUI app due to a confused deputy. This couldCVE-2026-00146.2In isPackageNullOrSystem of AppOpsService.java, there is a possible persistent denial of service due to improper input validation. This coulCVE-2026-00156.2In multiple locations of AppOpsService.java, there is a possible persistent denial of service due to improper input validation. This could lCVE-2026-00163.3In updateProvidersWhenServiceRemoved of CredentialManagerService.java, there is a possible way to override settings across users due to a pe
CVE-2026-0004: Medium severity, CVSS 5.7 | Vulnix