Amd vulnerabilities

320 vulnerabilities

Known vulnerabilities in Amd products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 1,346 products.

Products

50 of 1,346
9.3CVE-2018-8933amdepyc_server_firmware
EPSS score
1.66%
The AMD EPYC Server processor chips have insufficient access control for protected memory regions, aka FALLOUT-1, FALLOUT-2, and FALLOUT-3.9.3CVE-2018-8930amdepyc_server_firmware+3
EPSS score
1.75%
The AMD EPYC Server, Ryzen, Ryzen Pro, and Ryzen Mobile processor chips have insufficient enforcement of Hardware Validated Boot, aka MASTERKEY-1, MASTERKEY-2, and MASTERKEY-3.9.3CVE-2018-8936amdepyc_server_firmware+3
EPSS score
1.75%
The AMD EPYC Server, Ryzen, Ryzen Pro, and Ryzen Mobile processor chips allow Platform Security Processor (PSP) privilege escalation.9.3CVE-2018-8931amdryzen_firmware+2
EPSS score
1.66%
The AMD Ryzen, Ryzen Pro, and Ryzen Mobile processor chips have insufficient access control for the Secure Processor, aka RYZENFALL-1.9.3CVE-2018-8932amdryzen_firmware+1
EPSS score
1.66%
The AMD Ryzen and Ryzen Pro processor chips have insufficient access control for the Secure Processor, aka RYZENFALL-2, RYZENFALL-3, and RYZENFALL-4.9.3CVE-2018-8935amdryzen_firmware+1
EPSS score
1.75%
The Promontory chipset, as used in AMD Ryzen and Ryzen Pro platforms, has a backdoor in the ASIC, aka CHIMERA-HW.9.3CVE-2018-8934amdryzen_firmware+1
EPSS score
1.75%
The Promontory chipset, as used in AMD Ryzen and Ryzen Pro platforms, has a backdoor in firmware, aka CHIMERA-FW.4.7CVE-2013-6885amd16h_model_00h_processor+3
EPSS score
0.59%
The microcode on AMD 16h 00h through 0Fh processors does not properly handle the interaction between locked instructions and write-combined memory types, which allows local users to cause a denial of service (system hang) via a crafted application, aka the errata 793 issue.3.9CVE-2021-26387amdamd epyc™ 7001 series processors+7
EPSS score
0.15%
Insufficient access controls in ASP kernel may allow a privileged attacker with access to AMD signing keys and the BIOS menu or UEFI shell to map DRAM regions in protected areas, potentially leading to a loss of platform integrity.5.5CVE-2021-26349amdepyc_72f3_firmware+23
EPSS score
0.22%
Failure to assign a new report ID to an imported guest may potentially result in an SEV-SNP guest VM being tricked into trusting a dishonest Migration Agent (MA).5.5CVE-2021-26314amdall supported processors+8
EPSS score
0.61%
Potential floating point value injection in all supported CPU products, in conjunction with software vulnerabilities relating to speculative execution with incorrect floating point results, may cause the use of incorrect data from FPVI and may result in data leakage.5.5CVE-2021-26407amd2nd gen epyc+1
EPSS score
0.18%
A randomly generated Initialization Vector (IV) may lead to a collision of IVs with the same key potentially resulting in information disclosure.6.5CVE-2021-26403amd1st gen epyc+42
EPSS score
0.12%
Insufficient checks in SEV may lead to a malicious hypervisor disclosing the launch secret potentially resulting in compromise of VM confidentiality.7.8CVE-2021-26360amdamd radeon rx 6000 series & pro w6000 series+3
EPSS score
0.22%
An attacker with local access to the system can make unauthorized modifications of the security configuration of the SOC registers. This could allow potential corruption of AMD secure processor’s encrypted memory contents which may lead to arbitrary code execution in ASP.7.1CVE-2021-26370amd2nd gen amd epyc™+50
EPSS score
0.23%
Improper validation of destination address in SVC_LOAD_FW_IMAGE_BY_INSTANCE and SVC_LOAD_BINARY_BY_ATTRIB in a malicious UApp or ABL may allow an attacker to overwrite arbitrary bootloader memory with SPI ROM contents resulting in a loss of integrity and availability.5.5CVE-2021-26343amd3rd gen epyc+24
EPSS score
0.18%
Insufficient validation in ASP BIOS and DRTM commands may allow malicious supervisor x86 software to disclose the contents of sensitive memory which may result in information disclosure.7.1CVE-2021-26397amd3rd gen amd epyc™+23
EPSS score
0.18%
Insufficient address validation, may allow an attacker with a compromised ABL and UApp to corrupt sensitive memory locations potentially resulting in a loss of integrity or availability.5.5CVE-2021-26376amdathlon™ series+85
EPSS score
0.22%
Insufficient checks in System Management Unit (SMU) FeatureConfig may result in reenabling features potentially resulting in denial of resources and/or denial of service.9.8CVE-2021-26379amd2nd gen amd epyc™+49
EPSS score
0.68%
Insufficient input validation of mailbox data in the SMU may allow an attacker to coerce the SMU to corrupt SMRAM, potentially leading to a loss of integrity and privilege escalation.5.5CVE-2021-26327amd3rd gen amd epyc™+20
EPSS score
0.24%
Insufficient validation of guest context in the SNP Firmware could lead to a potential loss of guest confidentiality.