Information disclosure vulnerability in Hypervisor in Apple Mac OS X - CVE-2018-3646ID: oval:org.secpod.oval:def:48635 | Date: (C)2018-11-02 (M)2024-04-17 |
Class: VULNERABILITY | Family: macos |
The host is installed with Apple Mac OS X through 10.12.6, 10.13.6 or before 10.11.6 and is prone to an information disclosure vulnerability. A flaw is present in the application, which fails to properly handle the speculative execution and address translations issues. Successful exploitation allows an attacker to perform an unauthorized disclosure of information residing in the L1 data cache to an attacker with local user access with guest OS privilege via a terminal page fault and a side-channel analysis.
Platform: |
Apple Mac OS X 10.8 |
Apple Mac OS X 10.9 |
Apple Mac OS X 10.10 |
Apple Mac OS X 10.11 |
Apple Mac OS X 10.12 |
Apple Mac OS X 10.13 |