Intel Processor Transient Execution Info Leak Vulnerability (INTEL-SA-01423)

Vulnerability Overview Vulnerability ID: INTEL-SA-01423 Vulnerability Category: Hardware Impact Type: Information Disclosure Severity: Medium Release Date: November 8, 2026 Last Revised: November 8, 2026 Description: Certain Intel® processors may leak sensitive information due to incorrect data forwarding during transient execution. A system software attacker can trigger this data leakage by combining privileged user access with a high-complexity attack. This result may occur when accessed locally, provided the attack requires no specific insider knowledge and no user interaction. The potential vulnerability affects Confidentiality (None), Integrity (None), and Availability (None) of the vulnerable component, resulting in Confidentiality (High), Integrity (None), and Availability (None) impacts on subsequent systems. CVSS Base Score: 4.0 Medium CVSS Vector: CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N Affected Products Affected Products: - 10th Generation Intel® Core™ Processors - Client: 706E5, 80 - Mobile: 706E5, 80 - 3rd Generation Intel® Xeon® Scalable Processors - Server: 606A6, 87 - Intel® Xeon® D Processors - Server: Embedded, 606C1, 10 - Intel® Xeon® E-2300 Series - Server: A0671, 02 - 11th Generation Intel® Core™ Processors - Client: A0671, 02 Remediation Recommendation: Intel recommends that users of affected Intel® processors update to the latest version provided by their system manufacturer to resolve these issues. Additional Information Credits: This issue was discovered internally by Intel staff. Revision History: - Version 1.0, date November 8, 2026, Initial Release Legal Notice and Disclaimer Intel provides these materials "as is" without warranty of any kind, either expressed or implied. All products, dates, and specifications are subject to change at any time based on current expectations. Intel products and descriptions may contain design defects or errors, which are considered known errata and may cause the product to deviate from published specifications. Known errata are available upon request. Intel products that have reached the end-of-service-update date may no longer receive feature and security updates. Features and functionality of Intel technologies depend on system configuration and may require hardware, software, or service activation. Performance varies depending on system configuration. Some results are estimated or simulated using internal Intel analysis, architecture simulation, or modeling and are provided for informational purposes only. Any differences in your system's hardware, software, or configuration may affect your actual performance. © Intel Corporation. Intel, the Intel logo, and other Intel trademarks are trademarks of Intel Corporation or its subsidiaries. Other names and brands may be claimed as the property of their respective owners. Report a Vulnerability If you have information regarding security concerns or vulnerabilities affecting Intel-branded products or technologies, please submit your report via the Integrity platform. For issues related to external Intel websites (Intel.com and related subdomains), please contact Intel's External Security Research Team. Need Product Support? If you have questions about the security features of Intel products, require technical support, or wish to obtain product updates or patches, please visit Support & Downloads. --- Note: This page does not contain POC code or exploit code.

Goal Reached Thanks to every supporter — we hit 100%!

Intel Processor Transient Execution Info Leak Vulnerability (INTEL-SA-01423)