CVE-2018-3646: Intel Core i3

Medium severity, CVSS 5.6. EPSS: 8.6% chance of exploitation in the next 30 days.

Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data cache to an attacker with local user access with guest OS privilege via a terminal page fault and a side-channel analysis.

Affected products

• Intel Core i3: version 330e only; version 330m only; version 330um only; version 350m only; version 370m only; version 380m only; …
• Intel Core i5: version 430m only; version 430um only; version 450m only; version 460m only; version 470um only; version 480m only; …
• Intel Core i7: version 7y75 only; version 610e only; version 620le only; version 620lm only; version 620m only; version 620ue only; …
• Intel Core M: version 5y10 only; version 5y10a only; version 5y10c only; version 5y31 only; version 5y51 only; version 5y70 only; …
• Intel Core m3: version 6y30 only; version 7y30 only; version 7y32 only
• Intel Core m5: version 6y54 only; version 6y57 only
• Intel Core m7: version 6y75 only
• Intel Xeon: any version

Published 2018-08-14. Last modified 2026-06-17.