Meltdown in particular is worse than that, I believe. It would allow user-space programs - even regular sandboxed javascript in a browser - to read memory from

Meltdown in particular is worse than that, I believe. It would allow user-space programs - even regular sandboxed javascript in a browser - to read memory from the kernel and maybe other processes within the same OS?