Rapid7

vulnerability

Microsoft CVE-2017-5715: Guidance to mitigate speculative execution side-channel vulnerabilities

Severity
2
CVSS
(AV:L/AC:M/Au:N/C:P/I:N/A:N)
Published
Jan 3, 2018
Added
Feb 1, 2018
Modified
Dec 5, 2025

Description

Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.

Solution

msft-adv180002_general_remediation_steps

References

    Title
    Rapid7 Labs

    2026 Global Threat Landscape Report

    The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.