Systems with microprocessors utilizing speculative execution and that perform speculative reads of system registers may allow unauthorized disclosure of system parameters to an attacker with local user access via a side-channel analysis, aka Rogue System Register Read (RSRE), Variant 3a.
総合評価: CVE-2018-3640 は中リスク（60.2/100）。CVSS 深刻度は中。悪用される可能性が高い（EPSS 7.56%、94 パーセンタイル） 根拠: EPSS 上、短期間での悪用可能性は高い水準です。 直近 1 日で EPSS が +6.00% 上昇。悪用への関心が高まっている可能性があります。 推奨対応: 悪用可能性が高いため、影響範囲の確認と修補の優先付けを推奨します。
リスクは変動します。再評価に基づき、本ページの表示内容を更新しています。
EPSS は日次で悪用されやすさの相対度合いを推定します。パーセンタイルは採点済み CVE の中での相対位置（高いほど相対的に深刻）を示します。
| # | 日付 | 旧 EPSS スコア | 新 EPSS スコア | Δ（新 − 旧） |
|---|---|---|---|---|
| 1 | 2026-06-15 | 1.56% | 7.56% | +6.00% |
| 2 | 2026-05-11 | 1.38% | 1.56% | +0.18% |
| 3 | 2026-04-28 | — | 1.38% | — |
EPSS の全履歴 （全 26 件）
この CVE の CVSS 指標。
| ベーススコア | バージョン | 深刻度 | ベクトル | 悪用しやすさ | 影響 | スコアの出典 |
|---|---|---|---|---|---|---|
| 5.6 | 3.0 | MEDIUM |
|
1.1 | 4.0 | [email protected] |
| 4.7 | 2.0 | MEDIUM |
|
3.4 | 6.9 | [email protected] |
| vendor | priority | summary | link |
|---|---|---|---|
debian
|
not yet assigned | CVE-2018-3640 not yet assigned priority: Debian including 1 source packages (intel-microcode), 5 status rows across 5 suites (bookworm, bullseye, forky, sid, trixie): resolved 5. | https://security-tracker.debian.org/tracker/CVE-2018-3640 |
redhat
|
medium | — | https://access.redhat.com/security/cve/CVE-2018-3640 |
suse
|
medium | CVE-2018-3640 severity moderate: SUSE including 22 source package names (microcode_ctl-1.17-102.57.64.21.1, microcode_ctl-1.17-102.83.27.1, …), 48 product×package rows across 48 product lines (SUSE CaaS Platform 3.0, SUSE Enterprise Storage 4, … (48 product lines)): Fixed 48. | https://www.suse.com/security/cve/CVE-2018-3640/ |
ubuntu
|
medium | CVE-2018-3640 medium priority: Ubuntu including 1 source packages (intel-microcode), 5 status rows across 5 suites (artful, bionic, trusty, upstream, xenial): released 3, ignored 1, needed 1. | https://ubuntu.com/security/CVE-2018-3640 |
| ベンダー | 製品 | バージョン | 生の CPE |
|---|---|---|---|
| intel | atom_c | c2308 | cpe:2.3:h:intel:atom_c:c2308:*:*:*:*:*:*:* |
| intel | atom_c | c3308 | cpe:2.3:h:intel:atom_c:c3308:*:*:*:*:*:*:* |
| intel | atom_c | c3338 | cpe:2.3:h:intel:atom_c:c3338:*:*:*:*:*:*:* |
| intel | atom_c | c3508 | cpe:2.3:h:intel:atom_c:c3508:*:*:*:*:*:*:* |
| intel | atom_c | c3538 | cpe:2.3:h:intel:atom_c:c3538:*:*:*:*:*:*:* |
| intel | atom_c | c3558 | cpe:2.3:h:intel:atom_c:c3558:*:*:*:*:*:*:* |
| intel | atom_c | c3708 | cpe:2.3:h:intel:atom_c:c3708:*:*:*:*:*:*:* |
| intel | atom_c | c3750 | cpe:2.3:h:intel:atom_c:c3750:*:*:*:*:*:*:* |
| intel | atom_c | c3758 | cpe:2.3:h:intel:atom_c:c3758:*:*:*:*:*:*:* |
| intel | atom_c | c3808 | cpe:2.3:h:intel:atom_c:c3808:*:*:*:*:*:*:* |
| intel | atom_c | c3830 | cpe:2.3:h:intel:atom_c:c3830:*:*:*:*:*:*:* |
| intel | atom_c | c3850 | cpe:2.3:h:intel:atom_c:c3850:*:*:*:*:*:*:* |
| intel | atom_c | c3858 | cpe:2.3:h:intel:atom_c:c3858:*:*:*:*:*:*:* |
| intel | atom_c | c3950 | cpe:2.3:h:intel:atom_c:c3950:*:*:*:*:*:*:* |
| intel | atom_c | c3955 | cpe:2.3:h:intel:atom_c:c3955:*:*:*:*:*:*:* |
| intel | atom_c | c3958 | cpe:2.3:h:intel:atom_c:c3958:*:*:*:*:*:*:* |
| intel | atom_e | e3805 | cpe:2.3:h:intel:atom_e:e3805:*:*:*:*:*:*:* |
| intel | atom_e | e3815 | cpe:2.3:h:intel:atom_e:e3815:*:*:*:*:*:*:* |
| intel | atom_e | e3825 | cpe:2.3:h:intel:atom_e:e3825:*:*:*:*:*:*:* |
| intel | atom_e | e3826 | cpe:2.3:h:intel:atom_e:e3826:*:*:*:*:*:*:* |
| intel | atom_e | e3827 | cpe:2.3:h:intel:atom_e:e3827:*:*:*:*:*:*:* |
| intel | atom_e | e3845 | cpe:2.3:h:intel:atom_e:e3845:*:*:*:*:*:*:* |
| intel | atom_z | z2420 | cpe:2.3:h:intel:atom_z:z2420:*:*:*:*:*:*:* |
| intel | atom_z | z2460 | cpe:2.3:h:intel:atom_z:z2460:*:*:*:*:*:*:* |
| intel | atom_z | z2480 | cpe:2.3:h:intel:atom_z:z2480:*:*:*:*:*:*:* |
| intel | atom_z | z2520 | cpe:2.3:h:intel:atom_z:z2520:*:*:*:*:*:*:* |
| intel | atom_z | z2560 | cpe:2.3:h:intel:atom_z:z2560:*:*:*:*:*:*:* |
| intel | atom_z | z2580 | cpe:2.3:h:intel:atom_z:z2580:*:*:*:*:*:*:* |
| intel | atom_z | z2760 | cpe:2.3:h:intel:atom_z:z2760:*:*:*:*:*:*:* |
| intel | atom_z | z3460 | cpe:2.3:h:intel:atom_z:z3460:*:*:*:*:*:*:* |
| intel | atom_z | z3480 | cpe:2.3:h:intel:atom_z:z3480:*:*:*:*:*:*:* |
| intel | atom_z | z3530 | cpe:2.3:h:intel:atom_z:z3530:*:*:*:*:*:*:* |
| intel | atom_z | z3560 | cpe:2.3:h:intel:atom_z:z3560:*:*:*:*:*:*:* |
| intel | atom_z | z3570 | cpe:2.3:h:intel:atom_z:z3570:*:*:*:*:*:*:* |
| intel | atom_z | z3580 | cpe:2.3:h:intel:atom_z:z3580:*:*:*:*:*:*:* |
| intel | atom_z | z3590 | cpe:2.3:h:intel:atom_z:z3590:*:*:*:*:*:*:* |
| intel | atom_z | z3735d | cpe:2.3:h:intel:atom_z:z3735d:*:*:*:*:*:*:* |
| intel | atom_z | z3735e | cpe:2.3:h:intel:atom_z:z3735e:*:*:*:*:*:*:* |
| intel | atom_z | z3735f | cpe:2.3:h:intel:atom_z:z3735f:*:*:*:*:*:*:* |
| intel | atom_z | z3735g | cpe:2.3:h:intel:atom_z:z3735g:*:*:*:*:*:*:* |
| intel | atom_z | z3736f | cpe:2.3:h:intel:atom_z:z3736f:*:*:*:*:*:*:* |
| intel | atom_z | z3736g | cpe:2.3:h:intel:atom_z:z3736g:*:*:*:*:*:*:* |
| intel | atom_z | z3740 | cpe:2.3:h:intel:atom_z:z3740:*:*:*:*:*:*:* |
| intel | atom_z | z3740d | cpe:2.3:h:intel:atom_z:z3740d:*:*:*:*:*:*:* |
| intel | atom_z | z3745 | cpe:2.3:h:intel:atom_z:z3745:*:*:*:*:*:*:* |
| intel | atom_z | z3745d | cpe:2.3:h:intel:atom_z:z3745d:*:*:*:*:*:*:* |
| intel | atom_z | z3770 | cpe:2.3:h:intel:atom_z:z3770:*:*:*:*:*:*:* |
| intel | atom_z | z3770d | cpe:2.3:h:intel:atom_z:z3770d:*:*:*:*:*:*:* |
| intel | atom_z | z3775 | cpe:2.3:h:intel:atom_z:z3775:*:*:*:*:*:*:* |
| intel | atom_z | z3775d | cpe:2.3:h:intel:atom_z:z3775d:*:*:*:*:*:*:* |
| intel | atom_z | z3785 | cpe:2.3:h:intel:atom_z:z3785:*:*:*:*:*:*:* |
| intel | atom_z | z3795 | cpe:2.3:h:intel:atom_z:z3795:*:*:*:*:*:*:* |
| intel | celeron_j | j3455 | cpe:2.3:h:intel:celeron_j:j3455:*:*:*:*:*:*:* |
| intel | celeron_j | j4005 | cpe:2.3:h:intel:celeron_j:j4005:*:*:*:*:*:*:* |
| intel | celeron_j | j4105 | cpe:2.3:h:intel:celeron_j:j4105:*:*:*:*:*:*:* |
| intel | celeron_n | n3450 | cpe:2.3:h:intel:celeron_n:n3450:*:*:*:*:*:*:* |
| intel | core_i3 | 32nm | cpe:2.3:h:intel:core_i3:32nm:*:*:*:*:*:*:* |
| intel | core_i3 | 45nm | cpe:2.3:h:intel:core_i3:45nm:*:*:*:*:*:*:* |
| intel | core_i5 | 32nm | cpe:2.3:h:intel:core_i5:32nm:*:*:*:*:*:*:* |
| intel | core_i5 | 45nm | cpe:2.3:h:intel:core_i5:45nm:*:*:*:*:*:*:* |
| intel | core_i7 | 32nm | cpe:2.3:h:intel:core_i7:32nm:*:*:*:*:*:*:* |
| intel | core_i7 | 45nm | cpe:2.3:h:intel:core_i7:45nm:*:*:*:*:*:*:* |
| intel | core_m | 32nm | cpe:2.3:h:intel:core_m:32nm:*:*:*:*:*:*:* |
| intel | core_m | 45nm | cpe:2.3:h:intel:core_m:45nm:*:*:*:*:*:*:* |
| intel | pentium | n4000 | cpe:2.3:h:intel:pentium:n4000:*:*:*:*:*:*:* |
| intel | pentium | n4100 | cpe:2.3:h:intel:pentium:n4100:*:*:*:*:*:*:* |
| intel | pentium | n4200 | cpe:2.3:h:intel:pentium:n4200:*:*:*:*:*:*:* |
| intel | pentium_j | j4205 | cpe:2.3:h:intel:pentium_j:j4205:*:*:*:*:*:*:* |
| intel | pentium_silver | j5005 | cpe:2.3:h:intel:pentium_silver:j5005:*:*:*:*:*:*:* |
| intel | pentium_silver | n5000 | cpe:2.3:h:intel:pentium_silver:n5000:*:*:*:*:*:*:* |
| intel | xeon_e-1105c | — | cpe:2.3:h:intel:xeon_e-1105c:-:*:*:*:*:*:*:* |
| intel | xeon_e3 | 125c_ | cpe:2.3:h:intel:xeon_e3:125c_:*:*:*:*:*:*:* |
| intel | xeon_e3 | 1220_ | cpe:2.3:h:intel:xeon_e3:1220_:*:*:*:*:*:*:* |
| intel | xeon_e3 | 1275_ | cpe:2.3:h:intel:xeon_e3:1275_:*:*:*:*:*:*:* |
| intel | xeon_e3 | 1505m_v6 | cpe:2.3:h:intel:xeon_e3:1505m_v6:*:*:*:*:*:*:* |
| intel | xeon_e3 | 1515m_v5 | cpe:2.3:h:intel:xeon_e3:1515m_v5:*:*:*:*:*:*:* |
| intel | xeon_e3 | 1535m_v5 | cpe:2.3:h:intel:xeon_e3:1535m_v5:*:*:*:*:*:*:* |
| intel | xeon_e3 | 1535m_v6 | cpe:2.3:h:intel:xeon_e3:1535m_v6:*:*:*:*:*:*:* |
| intel | xeon_e3 | 1545m_v5 | cpe:2.3:h:intel:xeon_e3:1545m_v5:*:*:*:*:*:*:* |
| intel | xeon_e3 | 1558l_v5 | cpe:2.3:h:intel:xeon_e3:1558l_v5:*:*:*:*:*:*:* |