CWE-1303 Non-Transparent Sharing of Microarchitectural Resources

base

Hardware structures shared across execution contexts (e.g., caches and branch predictors) can violate the expected architecture isolation between contexts.

01

parent weaknesses

Broader classes this is a kind of.

02

vulnerabilities (5)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2023-1998USmedium5.6Exploit
The Linux kernel allows userspace processes to enable mitigations by calling prctl with PR_SET_SPECULATION_CTRL which disables the speculation feature as well as by using seccomp.…
CVE-2023-40540USmedium4.4—
Non-Transparent Sharing of Microarchitectural Resources in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable information disclosure via local access…
CVE-2026-59131US——
No cwe for this issue in AMD Zen allows an authorized attacker to disclose information locally.
CVE-2026-59130US——
No cwe for this issue in AMD Zen allows an authorized attacker to disclose information locally.
CVE-2023-38575US——
Non-transparent sharing of return predictor targets between contexts in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local…
03

attack patterns (1)

CAPEC attack patterns that exploit this.

04

source

Where this definition is published.

scry

Weaknesses like this turn up in real, exploitable exposures. See what is exposed on your perimeter with a free passive scan.

Free scan