Overview 102 matches · 0 in Waratek scope · 0 protected · 2 exploited · 0 CISA KEV · 7 public PoC · 4 EPSS ≥ 0.5
102matches
0in Waratek scope0.0%
0protected0.0%
2exploited2.0%
0CISA KEV0.0%
7public PoC6.9%
4EPSS ≥ 0.53.9%
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
0
0.0%
Outside Waratek scope
4
3.9%
Not applicable
98
96.1%
Withdrawn CVE
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
102
100.0%
not established
0
0.0%
unrecorded
0
0.0%
split by
peak 38 / year
20173
Not applicable3
High3
not blocked3
No public exploit3
201815
Outside Waratek scope3
Not applicable12
High2
Medium13
not blocked15
Exploited2
Working exploit published1
Proof of concept only1
No public exploit11
201912
Not applicable12
High3
Medium9
not blocked12
Proof of concept only1
No public exploit11
202012
Outside Waratek scope1
Not applicable11
High4
Medium8
not blocked12
Proof of concept only2
No public exploit10
20219
Not applicable9
High1
Medium8
not blocked9
No public exploit9
202238
Not applicable38
High10
Medium27
Low1
not blocked38
No public exploit38
202313
Not applicable13
High6
Medium6
Low1
not blocked13
Proof of concept only1
No public exploit12
2017201820192020202120222023
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2017-5926 | High | 2017-02-27 | Not applicable | No public exploit | Page table walks conducted by the MMU during virtual to physical address translation leave a trace in the last level cache of modern AMD processors. By performing a side-channel attack on the MMU operations, it is possible to leak data and code pointers from JavaScript, breaking ASLR. |
| CVE-2017-5925 | High | 2017-02-27 | Not applicable | No public exploit | Page table walks conducted by the MMU during virtual to physical address translation leave a trace in the last level cache of modern Intel processors. By performing a side-channel attack on the MMU operations, it is possible to leak data and code pointers from JavaScript, breaking ASLR. |