CVE-2023-28746: Fixes in impacted Intel processors
Information exposure through microarchitectural state after transient execution from some register files for some Intel(R) Atom(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
Other sources
Intel: CVE-2023-28746 Register File Data Sampling (RFDS)
— Microsoft
This CVE was assigned by Intel. Please see CVE-2023-28746 on CVE.org for more information.
— Microsoft
Affected Software
Event History
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2023-28746?
CVE-2023-28746 is considered a high severity vulnerability due to the potential for information exposure through microarchitectural state after transient execution.
How do I fix CVE-2023-28746?
To remediate CVE-2023-28746, apply the relevant patches provided by Microsoft and update the Intel microcode as specified for your operating system.
What systems are affected by CVE-2023-28746?
CVE-2023-28746 affects various Windows Server versions, Windows 10, Windows 11, and specific versions of the Intel microcode packages.
Is CVE-2023-28746 being actively exploited?
As of now, there is no public indication that CVE-2023-28746 is actively being exploited in the wild, but it is advisable to apply patches promptly.
What risks are associated with CVE-2023-28746?
The primary risk of CVE-2023-28746 is unauthorized access to sensitive data, which could be exploited by attackers through transient execution techniques.