Intel Core i7-4500u vulnerabilities

6 CVEs affecting Intel Core i7-4500u, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-0543, published 2020-06-15.

More from Intel.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2017-5927, published 2017-02-27. High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days. Page table walks conducted by the MMU during virtual to physical address translation leave a trace in the last level cache of modern ARM processors. By performing a side-channel attack on the MMU…
• CVE-2017-5926, published 2017-02-27. High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days. Page table walks conducted by the MMU during virtual to physical address translation leave a trace in the last level cache of modern AMD processors. By performing a side-channel attack on the MMU…
• CVE-2017-5925, published 2017-02-27. High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days. Page table walks conducted by the MMU during virtual to physical address translation leave a trace in the last level cache of modern Intel processors. By performing a side-channel attack on the MMU…
• CVE-2020-0551, published 2020-03-12. Medium severity, CVSS 5.6. EPSS: 1.1% chance of exploitation in the next 30 days. Load value injection in some Intel(R) Processors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. The…
• CVE-2020-0543, published 2020-06-15. Medium severity, CVSS 5.5. EPSS: 0.5% chance of exploitation in the next 30 days. Incomplete cleanup from specific special register read operations in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
• CVE-2020-0550, published 2020-03-12. Medium severity, CVSS 5.6. EPSS: 0.3% chance of exploitation in the next 30 days. Improper data forwarding in some data cache for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access. The list of affected products…