CVE-2017-5753 Public exploit Medium · 5.6 EPSS 93.8%
Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.
Intel Corporation · Most Modern Operating Systems
Summary
Intel microprocessors that use speculative execution and branch prediction, as found in most modern operating systems, contain a flaw that can leak information through side channels. An attacker needs local user access on the affected system, and the attack relies on side-channel analysis, which is considered a high-complexity technique and requires low privileges.
Heading is the official description · CVE.org
Priority scorePatchfirst’s 0 to 100 ranking. It adds points for CISA KEV listing, ransomware use, EPSS, threat reports, public exploit code and CVSS. Every CVE page shows the breakdown. Breakdown
75.0 / 100
- Exploited
- Yes, in VulnCheck KEV
- Reports
- 0
- Tactics
- 0/15
Exploitation timelineDated milestones for a CVE: when it was disclosed, when exploit code became public, when exploitation was confirmed, and when threat reports named it.
First seen exploited 9 years after disclosure. Public exploit code (Exploit-DB) was available 1 day before disclosure.
- Public exploit codeExploit-DB1 day before
- Disclosedday 0
- First seen exploitedVulnCheck KEV evidence+9 yrs
MITRE ATT&CKA public catalogue of the techniques attackers use, maintained by MITRE. Patchfirst uses it to describe what attackers do with a vulnerability. techniques
No techniques linkedNo ATT&CK techniques are linked to this CVE yet. MITRE CTID has not mapped it, and no report passage in the corpus ties it to a technique.
What security researchers reported
Not named in any threat report yetAlso mentioned in 2 community threat pulses (AlienVault OTX)
Weaker evidencePulses are indicator collections that anyone can publish. A mention is not confirmation of exploitation.