{"id":"CVE-2018-3639","published":"2018-05-22T12:00:00Z","modified":"2026-05-29T20:14:05Z","title":"Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the…","vendor":"Intel Corporation","product":"Multiple","tier":"core","eol":null,"affectedVersions":[{"vendor":"Intel Corporation","product":"Multiple","versions":["Multiple"]}],"description":{"text":"Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka Speculative Store Bypass (SSB), Variant 4.","provenance":"source","from":"CVE.org"},"summary":{"text":"The flaw affects systems using Intel microprocessors that perform speculative execution, specifically speculative reads of memory before the addresses of all prior memory writes are known, a behaviour known as Speculative Store Bypass (Variant 4). An attacker with local user access and no user interaction can use a side-channel analysis to disclose information they should not be able to read.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-29T07:13:30Z"},"cvss":{"score":5.5,"severity":"MEDIUM","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","provenance":"source","from":"CISA ADP Vulnrichment"},"epss":{"score":0.60631,"percentile":0.99142,"date":"2026-10-28","provenance":"source"},"kev":null,"vulncheckKev":{"dateAdded":"2020-02-25","exploitedFirstSeen":"2020-02-25","ransomware":true,"evidence":[{"url":"https://www.csk.gov.in/alerts/STOP_ransomware.html","date":"2020-02-25"},{"url":"https://cybersecurityworks.com/pdf/ransomware/Spotlight_Ransomware2021.pdf","date":"2021-02-11"},{"url":"https://cybersecurityworks.com/howdymanage/uploads/file/ransomware-_-2022-spotlight-report_compressed.pdf","date":"2022-01-26"},{"url":"https://info.securin.io/hubfs/Securin%20Ransomware%20Report%202023.pdf","date":"2023-02-14"}],"evidenceTotal":4,"provenance":"source"},"exploited":true,"otx":{"pulseCount":1,"pulses":[{"name":"CVE Data","url":"https://otx.alienvault.com/pulse/69929b597293fe5837b9c95c","created":"2026-02-16"}],"provenance":"machine"},"cwes":[{"id":"CWE-203","name":"Observable Discrepancy"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2018:1689","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2162","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2018:1641","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://usn.ubuntu.com/3680-1/","tags":["vendor-advisory","x_refsource_UBUNTU"]},{"url":"https://access.redhat.com/errata/RHSA-2018:1997","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2018:1665","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2018:3407","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2164","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2001","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2018:3423","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2003","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://usn.ubuntu.com/3654-1/","tags":["vendor-advisory","x_refsource_UBUNTU"]},{"url":"https://access.redhat.com/errata/RHSA-2018:1645","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2018:1643","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2018:1652","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2018:3424","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2018:3402","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://www.us-cert.gov/ncas/alerts/TA18-141A","tags":["third-party-advisory","x_refsource_CERT"]},{"url":"https://access.redhat.com/errata/RHSA-2018:1656","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2018:1664","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2258","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2018:1688","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2018:1658","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2018:1657","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2289","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2018:1666","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"http://www.securitytracker.com/id/1042004","tags":["vdb-entry","x_refsource_SECTRACK"]},{"url":"https://access.redhat.com/errata/RHSA-2018:1675","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2018:1660","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2018:1965","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2018:1661","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2018:1633","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2018:1636","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2018:1854","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2006","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2250","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"http://www.securitytracker.com/id/1040949","tags":["vdb-entry","x_refsource_SECTRACK"]},{"url":"https://access.redhat.com/errata/RHSA-2018:3401","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2018:1737","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2018:1826","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://usn.ubuntu.com/3651-1/","tags":["vendor-advisory","x_refsource_UBUNTU"]},{"url":"https://www.debian.org/security/2018/dsa-4210","tags":["vendor-advisory","x_refsource_DEBIAN"]},{"url":"https://www.exploit-db.com/exploits/44695/","tags":["exploit","x_refsource_EXPLOIT-DB"]},{"url":"https://access.redhat.com/errata/RHSA-2018:1651","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2018:1638","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2018:1696","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2246","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2018:1644","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2018:1646","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/07/msg00020.html","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://access.redhat.com/errata/RHSA-2018:1639","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2018:1668","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2018:1637","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2948","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://www.kb.cert.org/vuls/id/180049","tags":["third-party-advisory","x_refsource_CERT-VN"]},{"url":"https://access.redhat.com/errata/RHSA-2018:1686","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2172","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2018:1663","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://usn.ubuntu.com/3652-1/","tags":["vendor-advisory","x_refsource_UBUNTU"]},{"url":"https://access.redhat.com/errata/RHSA-2018:1629","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2018:1655","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2018:1640","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2018:1669","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2018:1676","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180521-cpusidechannel","tags":["vendor-advisory","x_refsource_CISCO"]},{"url":"https://access.redhat.com/errata/RHSA-2018:3425","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2363","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2018:1632","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2018:1650","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2396","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2364","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://usn.ubuntu.com/3653-2/","tags":["vendor-advisory","x_refsource_UBUNTU"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2216","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://usn.ubuntu.com/3655-1/","tags":["vendor-advisory","x_refsource_UBUNTU"]},{"url":"https://access.redhat.com/errata/RHSA-2018:1649","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2309","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"http://www.securityfocus.com/bid/104232","tags":["vdb-entry","x_refsource_BID"]},{"url":"https://access.redhat.com/errata/RHSA-2018:1653","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2171","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2018:1635","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/09/msg00017.html","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2394","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2018:1710","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2018:1659","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2018:1711","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://www.debian.org/security/2018/dsa-4273","tags":["vendor-advisory","x_refsource_DEBIAN"]},{"url":"https://access.redhat.com/errata/RHSA-2018:1738","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2018:1674","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2018:3396","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2018:1667","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://usn.ubuntu.com/3654-2/","tags":["vendor-advisory","x_refsource_UBUNTU"]},{"url":"https://access.redhat.com/errata/RHSA-2018:1662","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2018:1630","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2018:1647","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2018:1967","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://usn.ubuntu.com/3655-2/","tags":["vendor-advisory","x_refsource_UBUNTU"]},{"url":"https://access.redhat.com/errata/RHSA-2018:3399","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2060","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2018:1690","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://usn.ubuntu.com/3653-1/","tags":["vendor-advisory","x_refsource_UBUNTU"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2161","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/07/msg00038.html","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2328","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2018:1648","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2387","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2019:0148","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2018:1654","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://usn.ubuntu.com/3679-1/","tags":["vendor-advisory","x_refsource_UBUNTU"]},{"url":"https://usn.ubuntu.com/3777-3/","tags":["vendor-advisory","x_refsource_UBUNTU"]},{"url":"https://access.redhat.com/errata/RHSA-2018:1642","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2018:3397","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://lists.debian.org/debian-lts-announce/2019/03/msg00017.html","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://usn.ubuntu.com/3756-1/","tags":["vendor-advisory","x_refsource_UBUNTU"]},{"url":"https://access.redhat.com/errata/RHSA-2018:3398","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2018:3400","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2228","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://lists.debian.org/debian-lts-announce/2019/03/msg00034.html","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://lists.debian.org/debian-lts-announce/2019/04/msg00004.html","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://access.redhat.com/errata/RHSA-2019:1046","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00059.html","tags":["vendor-advisory","x_refsource_SUSE"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00058.html","tags":["vendor-advisory","x_refsource_SUSE"]},{"url":"https://seclists.org/bugtraq/2019/Jun/36","tags":["mailing-list","x_refsource_BUGTRAQ"]},{"url":"http://www.openwall.com/lists/oss-security/2020/06/10/1","tags":["mailing-list","x_refsource_MLIST"]},{"url":"http://www.openwall.com/lists/oss-security/2020/06/10/2","tags":["mailing-list","x_refsource_MLIST"]},{"url":"http://www.openwall.com/lists/oss-security/2020/06/10/5","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://www.oracle.com/security-alerts/cpujul2020.html","tags":["x_refsource_MISC"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html","tags":["x_refsource_CONFIRM"]},{"url":"https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0","tags":["x_refsource_CONFIRM"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-608355.pdf","tags":["x_refsource_CONFIRM"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-268644.pdf","tags":["x_refsource_CONFIRM"]},{"url":"http://support.lenovo.com/us/en/solutions/LEN-22133","tags":["x_refsource_CONFIRM"]},{"url":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0004","tags":["x_refsource_CONFIRM"]},{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV180012","tags":["x_refsource_CONFIRM"]},{"url":"https://support.citrix.com/article/CTX235225","tags":["x_refsource_CONFIRM"]},{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00115.html","tags":["x_refsource_CONFIRM"]},{"url":"https://www.synology.com/support/security/Synology_SA_18_23","tags":["x_refsource_CONFIRM"]},{"url":"https://developer.arm.com/support/arm-security-updates/speculative-processor-vulnerability","tags":["x_refsource_CONFIRM"]},{"url":"http://www.fujitsu.com/global/support/products/software/security/products-f/cve-2018-3639e.html","tags":["x_refsource_CONFIRM"]},{"url":"http://xenbits.xen.org/xsa/advisory-263.html","tags":["x_refsource_CONFIRM"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-505225.pdf","tags":["x_refsource_CONFIRM"]},{"url":"https://www.mitel.com/en-ca/support/security-advisories/mitel-product-security-advisory-18-0006","tags":["x_refsource_CONFIRM"]},{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03850en_us","tags":["x_refsource_CONFIRM"]},{"url":"https://bugs.chromium.org/p/project-zero/issues/detail?id=1528","tags":["x_refsource_MISC"]},{"url":"https://security.netapp.com/advisory/ntap-20180521-0001/","tags":["x_refsource_CONFIRM"]},{"url":"https://nvidia.custhelp.com/app/answers/detail/a_id/4787","tags":["x_refsource_CONFIRM"]},{"url":"https://support.oracle.com/knowledge/Sun%20Microsystems/2481872_1.html","tags":["x_refsource_CONFIRM"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00007.html","tags":["vendor-advisory","x_refsource_SUSE"]}],"techniques":[],"reports":[],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2018-15493","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-15493","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[{"id":44695,"url":"https://www.exploit-db.com/exploits/44695","title":"AMD / ARM / Intel - Speculative Execution Variant 4 Speculative Store Bypass","type":"dos","platform":"hardware","date":"2018-05-22","verified":true,"provenance":"source"}],"exploitSources":{"exploitdb":{"count":1,"earliest":"2018-05-22"},"pocGithub":{"count":3,"skipped":1,"earliest":"2018-05-31","earliestUrl":"https://github.com/tyhicks/ssbd-tools","repos":[{"name":"mmxsrup/CVE-2018-3639","url":"https://github.com/mmxsrup/CVE-2018-3639","stars":15,"created":"2019-05-11"},{"name":"tyhicks/ssbd-tools","url":"https://github.com/tyhicks/ssbd-tools","stars":9,"created":"2018-05-31"},{"name":"Shuiliusheng/CVE-2018-3639-specter-v4-","url":"https://github.com/Shuiliusheng/CVE-2018-3639-specter-v4-","stars":1,"created":"2019-06-26"}]},"first":{"date":"2018-05-22","source":"Exploit-DB","url":"https://www.exploit-db.com/exploits/44695"},"provenance":"source"},"exploitRefs":["https://www.exploit-db.com/exploits/44695/"],"flow":[],"timeline":[{"date":"2018-05-22","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2018-3639","provenance":"source"},{"date":"2018-05-22","kind":"exploit-public","label":"First public exploit: Exploit-DB (EDB-44695); later: PoC-in-GitHub 2018-05-31","url":"https://www.exploit-db.com/exploits/44695","provenance":"source"},{"date":"2020-02-25","kind":"exploited-reported","label":"Exploitation first reported (VulnCheck KEV evidence)","url":"https://www.csk.gov.in/alerts/STOP_ransomware.html","provenance":"source"}],"speed":{"daysToPublicExploit":0,"firstExploitFrom":"Exploit-DB","daysToKev":null},"priority":{"score":74.4,"factors":[{"name":"In a KEV catalog","points":35.0,"detail":"listed in VulnCheck KEV"},{"name":"Recent KEV listing","points":0.0,"detail":"added 2438 days ago"},{"name":"Known ransomware use","points":10.0,"detail":"VulnCheck KEV: Known"},{"name":"EPSS percentile","points":19.83,"detail":"percentile 0.9914"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":5.0,"detail":"1 NVD reference tagged Exploit; 1 Exploit-DB entry; 3 PoC-in-GitHub repos"},{"name":"Mentioned in OTX pulses","points":0.68,"detail":"1 pulse"},{"name":"CVSS severity","points":3.85,"detail":"base score 5.5"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}