CVE-2023-40540

Non-Transparent Sharing of Microarchitectural Resources in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable information disclosure via local access.

Scoring

Severity

MEDIUM

CVSS base score

4.1

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N

EPSS probability

0.06%

CWE

CWE-1303

Published

2023-11-14

Last modified

2026-03-13

Affected products

• n/a Intel(R) NUC BIOS firmware

Weakness type

• CWE-1303

Related vulnerabilities

• CVE-2023-1998 — Spectre v2 SMT mitigations problem in Linux kernel
• CVE-2023-38575 — Non-transparent sharing of return predictor targets between contexts in some Intel(R) Processors may allow an authorized

Markdown version · Browse all CVEs