Medium 6.5Published Jun 9, 2021

CVE-2020-24513Domain-bypass transient execution vulnerability in some Intel Atom(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

Updated under an hour ago (Oct 26, 2026, 9:30 PM ET)

Does this affect you?

It affects intel atom_c3308 and 59 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for intel atom_c3308

Exploited in the last 30 days

Domain-bypass transient execution vulnerability in some Intel Atom(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

CVSS: 6.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: intel
NVD analysis: Modified
Record last updated: Oct 8, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

intel atom_c3308 intel:atom_c3308	all versions	NVD
intel atom_c3336 intel:atom_c3336	all versions	NVD
intel atom_c3338 intel:atom_c3338	all versions	NVD
intel atom_c3338r intel:atom_c3338r	all versions	NVD
intel atom_c3436l intel:atom_c3436l	all versions	NVD
intel atom_c3508 intel:atom_c3508	all versions	NVD
intel atom_c3538 intel:atom_c3538	all versions	NVD
intel atom_c3558 intel:atom_c3558	all versions	NVD
intel atom_c3558r intel:atom_c3558r	all versions	NVD
intel atom_c3558rc intel:atom_c3558rc	all versions	NVD
1–10 of 60

References

References

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00465.html	x-refsource-misc
https://www.debian.org/security/2021/dsa-4934	vendor-advisory, x-refsource-debian
https://lists.debian.org/debian-lts-announce/2021/07/msg00022.html	mailing-list, x-refsource-mlist
https://cert-portal.siemens.com/productcert/pdf/ssa-309571.pdf	x-refsource-confirm

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.