Amd Ryzen 3 3300U vulnerabilities, page 2

27 vulnerabilities

Known vulnerabilities in Amd Ryzen 3 3300U, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6CVE-2023-20579amdamd ryzen™ 3000 series processors with radeon™ graphics+142
EPSS score
0.16%
Improper Access Control in the AMD SPI protection feature may allow a user with Ring0 (kernel mode) privileged access to bypass protections potentially resulting in loss of integrity and availability.
8.8CVE-2023-20558amd2nd gen amd ryzen™ threadripper™ processor+95
EPSS score
0.67%
Insufficient control flow management in AmdCpmOemSmm may allow a privileged attacker to tamper with the SMM handler potentially leading to an escalation of privileges.
4.4CVE-2023-20594amd3rd gen amd epyc™ processors+139
EPSS score
0.19%
Improper initialization of variables in the DXE driver may allow a privileged user to leak sensitive information via local access.
8.8CVE-2023-20559amd2nd gen amd ryzen™ threadripper™ processor+95
EPSS score
0.67%
Insufficient control flow management in AmdCpmGpioInitSmm may allow a privileged attacker to tamper with the SMM handler potentially leading to escalation of privileges.
5.7CVE-2023-20521amd1st gen amd epyc™ processors+106
EPSS score
0.26%
TOCTOU in the ASP Bootloader may allow an attacker with physical access to tamper with SPI ROM records after memory content verification, potentially leading to loss of confidentiality or a denial of service.
5.5CVE-2023-20597amdryzen_3_3100_firmware+110
EPSS score
0.18%
Improper initialization of variables in the DXE driver may allow a privileged user to leak sensitive information via local access.
7.8CVE-2023-20555amdathlon_3015ce_firmware+133
EPSS score
0.32%
Insufficient input validation in CpmDisplayFeatureSmm may allow an attacker to corrupt SMM memory by overwriting an arbitrary bit in an attacker-controlled pointer potentially leading to arbitrary code execution in SMM.