Description
An information disclosure vulnerability exists on ARM implementations that use speculative execution in control flow via a side-channel analysis, aka "straight-line speculation."
To exploit this vulnerability, an attacker with local privileges would need to run a specially crafted application.
The security update addresses the vulnerability by bypassing the speculative execution.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Microsoft | Windows 10 Version 1809 | 10.0.0 – < publication | publication |
| Microsoft | Windows 10 Version 1909 | 10.0.0 – < publication | publication |
| Microsoft | Windows 10 Version 1903 for ARM64-based Systems | 10.0.0 – < publication | publication |
| Microsoft | Windows 10 Version 2004 | 10.0.0 – < publication | publication |