Skip to content
October 26, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Weekly Recap
Light/Dark Button
  • Home
  • News
  • Technology
  • Intel’s new processor may not be able to repair the new Spectre variant vulnerability
  • Technology

Intel’s new processor may not be able to repair the new Spectre variant vulnerability

Do Son May 26, 2018 2 minutes read
Add Daily CyberSecurity as a preferred source on Google

The modern processor, which has been exposed since the beginning of the year, has pushed chip maker Intel to the forefront due to the specter and the leakiness of design issues.

Even if Intel has introduced multiple microcode updates, it does not completely solve the problem, because if you want to solve the problem completely, you have to redesign the processor.

In view of this, Intel Corporation has added hardware-based protection measures to the new processors. This protection can block ghosts and blowouts.

Earlier, Microsoft and Google’s security researchers jointly announced the discovery of new variants of Spectre and Meltdown security breaches, also speculating on execution issues.

At present, Intel Corporation has also admitted that its processor is attacked by a new variant of vulnerability that can be used by attackers to access memory to read sensitive data.

In fact, the new variant can also execute malicious code through the browser and then steal data, so it is no less harmful than the ghost and the fuse hole.

The latest release of THREATPOST from foreign technology media shows that Intel’s new processors may not be able to repair new variants.

However, sources who disclosed the news said that Intel has prepared microcode to repair, which is to return to the current software-based repair strategy.

At present, most of the users concerned about the ghosting and the fuse-breaking loops are whether or not they can be completely repaired and repaired at the software level will affect the performance of the processor.

It is now certain that older processors (now all released) can only be updated with microcode, and that the repairs will affect processor performance.

As for the new processor that will be released in the second half of 2018, whether the repair of new variants will affect the overall performance of the processor is temporarily unknown.

Intel will introduce more microcode updates in the second half to strengthen the blocking of vulnerabilities, so even users with performance impacts need to continue to install updates.

Related coverage

  • Apple Removes Russian Apps VK and MAX from App Store
  • Microsoft Strengthens Default Security Posture Against NTLM Relay Attacks
  • Gemini App Unleashes Veo 3: Transform Photos into Videos Now
  • WhatsApp Interoperability Live: Meta Confirms DMA Integration with BirdyChat and Haiket
  • Meet Your New Coworker: Anthropic’s Claude Now Controls Your Mac
  • Intel GPU Performance Hit by Security Mitigations: Ubuntu Weighs Disabling Them for 20% Boost
Track all actively exploited CVEs →

Support Our Threat Intelligence

Find our tech and OS security coverage helpful? Support our work today and unlock a 100% ad-free reading experience!

Buy Me a Coffee Logo Buy Me a Coffee
Select your plan
Free Pro Team

Hover over a plan to see its benefits.

Get Zero-Hour Vulnerability Alerts

Critical CVEs, CVSS scores, and PoC updates — straight to your inbox every week.

We respect your inbox. Unsubscribe anytime.

SHARE
Share on FacebookShare on XShare on LinkedInShare on TelegramShare on BlueskyShare on Mastodon
Written by
@DdoS · Security Researcher

Do Son

Do Son is the Founder and Editor of SecurityOnline.info. Working in cybersecurity since 2013, he reports on vulnerabilities, malware, and emerging threats, providing timely analysis to help organizations and individuals stay ahead of evolving risks.

Tags: Spectre variant vulnerability

Search

Translation

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2020-13125CVSS 7.2
    An issue was discovered in the "Ultimate Addons for Elementor" plugin before 1.24.2 for WordPress, as exploited in...
    Watchtower Verified📅 Updated: Oct 26, 2026
  • CVE-2020-13126CVSS 9.9
    An issue was discovered in the Elementor Pro plugin before 2.9.4 for WordPress, as exploited in the wild...
    Watchtower Verified📅 Updated: Oct 26, 2026
  • CVE-2019-20180CVSS 8.0
    The TablePress plugin for WordPress is vulnerable to CSV Injection in versions up to and including 1.14 via...
    Watchtower Verified📅 Updated: Oct 26, 2026
  • CVE-2026-106173CVSS 9.8
    A improper limitation of a pathname to a restricted directory (\'path traversal\') vulnerability in Fortinet FortiSIEM 7.5.0 may...
    Admin intel📅 Updated: Oct 25, 2026
  • CVE-2014-125133CVSS 8.7
    NativeChurch theme for WordPress before 1.6.2 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary...
    Watchtower Verified📅 Updated: Oct 24, 2026
  • CVE-2015-20128CVSS 8.8
    FooSun DotNetCMS 1.0 and 2.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate MSSQL queries...
    Watchtower Verified📅 Updated: Oct 24, 2026
  • CVE-2016-20104CVSS 8.7
    EyeLock nano NXT 3.05.1193, 3.04.1108, 3.03.944, and 3.01.646 contain a path traversal vulnerability that allows unauthenticated attackers to...
    Watchtower Verified📅 Updated: Oct 24, 2026
  • CVE-2026-110447CVSS 9.2
    Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app, allows remote code execution, as exploited in...
    CISA KEV📅 Added to KEV: Oct 23, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-45083CVSS 9.8
    The Goobi viewer is a web application that allows digitised material to be displayed in a web browser....
    📅 Updated: Oct 26, 2026
  • CVE-2026-47323CVSS 9.8
    Camel-CXF and Camel-Knative Message Header Injection via Missing Inbound Filtering The CXF and Knative HeaderFilterStrategy implementations (CxfRsHeaderFilterStrategy in...
    📅 Updated: Oct 26, 2026
  • CVE-2026-42731CVSS 9.8
    Incorrect Privilege Assignment vulnerability in miniOrange miniorange otp verification miniorange-otp-verification allows Privilege Escalation.This issue affects miniorange otp verification:...
    📅 Updated: Oct 26, 2026
  • CVE-2026-32999CVSS 9.0
    Insufficient character filtering in backup agent signing module on Comet Backup server allows authenticated tenant administrator to execute...
    📅 Updated: Oct 26, 2026
  • CVE-2026-46907CVSS 9.9
    Vulnerability in the JD Edwards EnterpriseOne Order Promising product of Oracle JD Edwards (component: Order Promising Integration). The...
    📅 Updated: Oct 26, 2026
  • CVE-2026-46908CVSS 9.9
    Vulnerability in the JD Edwards EnterpriseOne Accounts Payable product of Oracle JD Edwards (component: Accounts Payable). The supported...
    📅 Updated: Oct 26, 2026
  • CVE-2026-46909CVSS 9.8
    Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure Security). Supported versions...
    📅 Updated: Oct 26, 2026
  • CVE-2026-46910CVSS 9.1
    Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure Security). Supported versions...
    📅 Updated: Oct 26, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.