Spectre ended up being a handful of (non-contiguous) CVEs. It's much easier to talk about "Spectre" as a class of vulnerability than "these 6 CVEs and also tha

Spectre ended up being a handful of (non-contiguous) CVEs. It's much easier to talk about "Spectre" as a class of vulnerability than "these 6 CVEs and also that other variant that doesn't have a CVE yet". What happens next year when there's a new way to bleed RAM? If it's anything like Spectre, we'll call it "RAMBleed Variant 2", and assign it a new CVE.