{"cve":"CVE-2018-3640","nvd":{"published":"2018-05-22T12:29:00.327","modified":"2026-06-17T01:57:36.693","status":"Modified","description":"Systems with microprocessors utilizing speculative execution and that perform speculative reads of system registers may allow unauthorized disclosure of system parameters to an attacker with local user access via a side-channel analysis, aka Rogue System Register Read (RSRE), Variant 3a.","cvss_v4":null,"cvss_v3":{"version":"3.0","vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","score":5.6},"cwes":["CWE-203"],"references":["http://support.lenovo.com/us/en/solutions/LEN-22133","http://www.fujitsu.com/global/support/products/software/security/products-f/cve-2018-3639e.html","http://www.securityfocus.com/bid/104228","http://www.securitytracker.com/id/1040949","http://www.securitytracker.com/id/1042004"],"products":["arm:cortex-a","intel:atom_c","intel:atom_e","intel:atom_z","intel:celeron_j","intel:celeron_n","intel:core_i3","intel:core_i5","intel:core_i7","intel:core_m","intel:pentium","intel:pentium_j","intel:pentium_silver","intel:xeon_e-1105c","intel:xeon_e3","intel:xeon_e3_1105c_v2","intel:xeon_e3_1125c_v2","intel:xeon_e3_12201","intel:xeon_e3_12201_v2","intel:xeon_e3_1220_v2","intel:xeon_e3_1220_v3","intel:xeon_e3_1220_v5","intel:xeon_e3_1220_v6","intel:xeon_e3_1220l_v3","intel:xeon_e3_1225","intel:xeon_e3_1225_v2","intel:xeon_e3_1225_v3","intel:xeon_e3_1225_v5","intel:xeon_e3_1225_v6","intel:xeon_e3_1226_v3","intel:xeon_e3_1230","intel:xeon_e3_1230_v2","intel:xeon_e3_1230_v3","intel:xeon_e3_1230_v5","intel:xeon_e3_1230_v6","intel:xeon_e3_1230l_v3","intel:xeon_e3_1231_v3","intel:xeon_e3_1235","intel:xeon_e3_1235l_v5","intel:xeon_e3_1240","intel:xeon_e3_1240_v2","intel:xeon_e3_1240_v3","intel:xeon_e3_1240_v5","intel:xeon_e3_1240_v6","intel:xeon_e3_1240l_v3","intel:xeon_e3_1240l_v5","intel:xeon_e3_1241_v3","intel:xeon_e3_1245","intel:xeon_e3_1245_v2","intel:xeon_e3_1245_v3"],"source":"nvd","synced_at":"2026-10-19T20:50:40.212176939+00:00"},"epss":{"cve":"CVE-2018-3640","score":0.0714,"percentile":0.94268,"date":"2026-10-31"},"kev":null,"osv":[],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}