CVE-2023-20569

CVE-2023-20569, a software vulnerability also known as "Inception", was discovered and disclosed by ETH Zurich academics. This flaw in software design or implementation potentially leads to information disclosure. The vulnerability is named "Inception" in reference to the Christopher Nolan film about manipulating a person's dreams to achieve a desired outcome in the real world. Details of the flaw were published on various platforms including the National Vulnerability Database (NVD) and the ETH Zurich research page. This vulnerability is one among several security issues addressed by Microsoft in its Chromium-based Edge browser since last month's Patch Tuesday edition. It is also identified as a side-channel flaw impacting certain processor models offered by AMD. The details and updates related to this vulnerability can be found on Microsoft's update guide. Moreover, Inception (CVE-2023-20569) is part of a series of novel methods of exploiting vulnerabilities, along with Collide+Power (CVE-2023-20583), and Downfall (CVE-2022-40982). These followed the disclosure of another newly discovered security vulnerability affecting AMD’s Zen 2 architecture-based processors. All these vulnerabilities highlight the ongoing challenges in securing software and hardware against increasingly sophisticated threats.