Spoiler (security vulnerability)

{{short description|Security vulnerability on CPUs that use speculative execution}}

{{Infobox bug

| name = Spoiler

| image =

| image_size =

| alt =

| caption =

| screenshot =

| screenshot_size =

| screenshot_alt =

| screenshot_caption =

| CVE = {{CVE|2019-0162}}

| discovered = {{Start date and age|2018|11|df=yes}}

| patched =

| discoverer = {{flagicon|United States}} Worcester Polytechnic Institute
{{flagicon|Germany}} University of Lübeck

| affected hardware = Modern Intel microprocessors

| affected software =

| used by =

| website =

}}

Spoiler is a security vulnerability on modern computer central processing units that use speculative execution. It exploits side-effects of speculative execution to improve the efficiency of Rowhammer and other related memory and cache attacks. According to reports, all modern Intel Core CPUs are vulnerable to the attack {{As of|2019||df=|lc=y}}.{{Cite web|url=https://www.zdnet.com/article/all-intel-chips-open-to-new-spoiler-non-spectre-attack-dont-expect-a-quick-fix/|title=All Intel chips open to new Spoiler non-Spectre attack: Don't expect a quick fix|last=Tung|first=Liam|website=ZDNet|language=en|access-date=2019-03-18}}{{Cite web|url=https://appleinsider.com/articles/19/03/05/new-spoiler-vulnerability-in-all-intel-core-processors-exposed-by-researchers|title=New 'Spoiler' vulnerability in all Intel Core processors exposed by researchers|last1=Owen|first1=Malcolm|date=March 5, 2019|website=AppleInsider|language=en|access-date=2019-03-18}} AMD has stated that its processors are not vulnerable.{{Cite web|url=https://www.amd.com/en/support/kb/faq/pa-240|title=Spoiler {{!}} AMD|website=www.amd.com|access-date=2019-03-18}}{{Cite web|url=https://www.tomshardware.com/news/amd-processor-intel-spoiler-vulnerability,38841.html|title=AMD Confirms Its Processors Aren't Impacted by Spoiler Vulnerability|date=2019-03-17|website=Tom's Hardware|language=en|access-date=2019-03-18}}

Spoiler was issued a Common Vulnerabilities and Exposures ID of {{CVE|2019-0162}}.