CPU Vulns are now public. There are two distinct vulns, in summary:
Meltdown: Memory accesses executed out of order after faults are leaked into caches. "Fixed" by KAISER at the cost of far slower switches between kernel and userspace. Mostly specific to Intel processors.
Spectre: Speculatively executed instructions on branch mispredictions can leak the address space through caches. No fix available it seems, and it affects Intel, AMD, & ARM processors. Possible to exploit from within browser sandboxes.