cve.bz

CWE-1303: Non-Transparent Sharing of Microarchitectural Resources

Filter

Hardware structures shared across execution contexts (e.g., caches and branch predictors) can violate the expected architecture isolation between contexts.

What the weakness is: CWE-1303 at MITRE. All weaknesses

Related attack patterns (CAPEC): 1
  • CAPEC-663 Exploitation of Transient Instruction Execution Likelihood: Low · Severity: Very High

The attack patterns MITRE's CAPEC relates to CWE-1303, as MITRE names them. Credits.

Ask an AI about CWE-1303

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-1303: Non-Transparent Sharing of Microarchitectural Resources and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/1303.html and https://cve.bz/cve/cwe/1303?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 5.6CVE-2026-59131EPSS 0.3%

    No cwe for this issue in AMD Zen allows an authorized attacker to disclose information locally.

  2. 5.6CVE-2026-59130EPSS 0.4%

    No cwe for this issue in AMD Zen allows an authorized attacker to disclose information locally.

  3. 5.5CVE-2023-38575EPSS 0.3%

    Non-transparent sharing of return predictor targets between contexts in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access.

  4. 4.4CVE-2023-40540EPSS 0.2%

    Non-Transparent Sharing of Microarchitectural Resources in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable information disclosure via local access.

  5. 5.6CVE-2023-1998ExploitEPSS 1.4%

    The Linux kernel allows userspace processes to enable mitigations by calling prctl with PR_SET_SPECULATION_CTRL which disables the speculation feature as well as by using seccomp. We had noticed that on VMs of at least one major cloud prov…