CVEs published in May 2026
7,396 vulnerabilities, 722 critical, 21 exploited.
- amd cleanup utility, radeon™ pro vii, radeon™ pro w5000 series graphics products +9 more +11 moreA DLL hijacking vulnerability in the AMD Cleanup Utility could allow an attacker to achieve...7.0 High
- amd radeon™ rx 7000 series graphics productsImproper verification of cryptographic signature in the Radeon RGB tool could allow a malicious...7.0 High
- amd instinct™ mi210, instinct™ mi300x, instinct™ mi325x +1 more +3 moreImproper cleanup of shared register resources in GPU firmware could allow an admin-privileged...4.6 Medium
- amd radeon™ pro v710Improper isolation of GPU HW register space could allow a privileged attacker in malicious Guest...6.8 Medium
- amd radeon™ pro w7000 series graphics products, radeon™ rx 7000 series graphics products, ryzen™ 7040 series mobile processors with radeon™ graphics +5 more +7 moreAn out-of-bounds read in power management firmware by a malicious local attacker with low...4.8 Medium
- amd radeon™ pro v520, radeon™ pro v620, radeon™ pro w6000 series graphics products +1 more +3 moreImproper validation in Power Management Firmware (PMFW) may allow an attacker with privileges to...6.8 Medium
- amd instinct™ mi210, instinct™ mi250, radeon™ pro w6000 series graphics products +3 more +5 moreImproper restriction of operations within the bounds of a memory buffer in the AMD secure...8.8 High
- amd instinct™ mi210, instinct™ mi250, radeon™ pro v520 +2 more +4 moreImproper handling of insufficient privileges in the AMD Secure Processor (ASP) could allow an...5.3 Medium
- amd instinct™ mi210, instinct™ mi250, instinct™ mi300a +5 more +7 moreOut of bounds write in AMD AMDGV_CMD_GET_DIAG_DATA ioctl handler could allow a local user to...8.5 High
- amd instinct™ mi210, instinct™ mi250, instinct™ mi300a +9 more +11 moreInsufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a...1.8 Low
- amd instinct™ mi210, instinct™ mi250, instinct™ mi300a +10 more +12 moreInsufficient parameter sanitization in AMD Secure Processor (ASP) TEE SOC Driver could allow an...4.6 Medium
- amd instinct™ mi300a, instinct™ mi300x, instinct™ mi308x +1 more +3 moreInsufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a...1.8 Low
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, ryzen™ 3000 series desktop processors +30 more +32 moreInsecure default configuration state of DDR5 memory module by AGESA Bootloader Firmware could...6.9 Medium
- amd instinct™ mi210, instinct™ mi250, radeon™ pro v620 +15 more +17 moreImproperly preserved integrity of hardware configuration state during a power save/restore...7.1 High
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, instinct™ mi210 +18 more +20 moreA TOCTOU (Time-Of-Check to Time-Of-Use) in the graphics interface may allow an attacker to load...1.8 Low
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, radeon™ instinct™ mi25 +25 more +27 moreA compromised Trusted OS (TOS) driver could issue a malformed call that could potentially allow ...1.8 Low
- lfprojects mlflow, mlflow mlflow/mlflow +1 moreAuthentication Bypass in mlflow/mlflow8.6 High
- amd ryzen™ 7040 series mobile processors with radeon™ graphics, ryzen™ 8000 series desktop processors, ryzen™ 8040 series mobile processors with radeon™ graphics +1 more +3 moreImproper access control between the Joint Test Action Group (JTAG) and Advanced Extensible...5.3 Medium
- rapid7 metasploit proMetasploit Pro on Windows: Local Privilege Escalation via OpenSSL Configuration File Loading8.5 High
- amd athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 4004 series processors, epyc™ 4005 series processors +25 more +27 moreImproper Input Validation in the AMD RAID driver could allow an attacker to point to an arbitrary...8.6 High
- amd ryzen™ 6000 series processors with radeon™ graphics (formerly codenamed "rembrandt"), ryzen™ 7035 series processors with radeon™ graphics (formerly codenamed "rembrandt r"), ryzen™ 7040 series mobile processors with radeon™ graphics (formerly codenamed "phoenix") +2 more +4 moreAn out of bounds write within the AMD Platform Management Framework (PMF) could allow an attacker...8.4 High
- amd athlon™ 3000 series mobile processors with radeon™ graphics (formerly codenamed "picasso"), ryzen™ 3000 series mobile processors with radeon™ graphics (formerly codenamed "dali"), ryzen™ 4000 series mobile processors with radeon™ graphics (formerly codenamed "renoir") +13 more +15 moreA buffer overflow vulnerability within AMD Sensor Fusion Hub Driver can allow a local attacker to...6.8 Medium
- amd ryzen embedded 8000 series processors, ryzen™ 7035 series processors with radeon™ graphics (formerly codenamed "rembrandt r"), ryzen™ 7040 series mobile processors with radeon™ graphics (formerly codenamed "phoenix") +1 more +3 moreAn unchecked return value within the AMD Platform Management Framework (PMF) could allow an...7.1 High
- amd ryzen™ 6000 series processors with radeon™ graphics (formerly codenamed "rembrandt"), ryzen™ 7035 series processors with radeon™ graphics (formerly codenamed "rembrandt r"), ryzen™ 7040 series mobile processors with radeon™ graphics (formerly codenamed "phoenix") +2 more +4 moreAn out of bounds read within the AMD Platform Management Framework (PMF) could allow an attacker...5.8 Medium
- amd ryzen™ 6000 series processors with radeon™ graphics (formerly codenamed "rembrandt"), ryzen™ 7035 series processors with radeon™ graphics (formerly codenamed "rembrandt r"), ryzen™ 7040 series mobile processors with radeon™ graphics (formerly codenamed "phoenix") +2 more +4 moreAn unchecked return value within the AMD Platform Management Framework (PMF) could allow an...8.3 High
- amd ryzen™ 6000 series processors with radeon™ graphics (formerly codenamed "rembrandt"), ryzen™ 7035 series processors with radeon™ graphics (formerly codenamed "rembrandt r"), ryzen™ 7040 series mobile processors with radeon™ graphics (formerly codenamed "phoenix") +4 more +6 moreImproper input validation within the AMD Platform Management Framework (PMF) could allow an...8.4 High
- amd ryzen™ 6000 series processors with radeon™ graphics (formerly codenamed "rembrandt"), ryzen™ 7035 series processors with radeon™ graphics (formerly codenamed "rembrandt r"), ryzen™ 7040 series mobile processors with radeon™ graphics (formerly codenamed "phoenix") +3 more +5 moreUse of uninitialized resource within the AMD Platform Management Framework (PMF) could allow an...6.9 Medium
- amd ryzen™ 6000 series processors with radeon™ graphics (formerly codenamed "rembrandt"), ryzen™ 7035 series processors with radeon™ graphics (formerly codenamed "rembrandt r"), ryzen™ 7040 series mobile processors with radeon™ graphics (formerly codenamed "phoenix") +2 more +4 moreAn improper input validation vulnerability within the AMD Platform Management Framework (PMF)...8.5 High
- amd ryzen™ 6000 series processors with radeon™ graphics (formerly codenamed "rembrandt"), ryzen™ 7035 series processors with radeon™ graphics (formerly codenamed "rembrandt r"), ryzen™ 7040 series mobile processors with radeon™ graphics (formerly codenamed "phoenix") +2 more +4 moreAn improper input validation vulnerability within the AMD Platform Management Framework (PMF)...6.9 Medium
- amd ryzen™ 6000 series processors with radeon™ graphics (formerly codenamed "rembrandt"), ryzen™ 7035 series processors with radeon™ graphics (formerly codenamed "rembrandt r"), ryzen™ 7040 series mobile processors with radeon™ graphics (formerly codenamed "phoenix") +2 more +4 moreAn improper input validation vulnerability within the AMD Platform Management Framework (PMF)...8.5 High
- amd epyc™ 4004 series processors, epyc™ 4005 series processors, epyc™ embedded 4004 series processors +37 more +39 moreImproper Input validation in the AMD Secure Processor (ASP) PCI driver may allow a local attacker...6.9 Medium
- amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 4004 series processors +43 more +45 moreIncorrect default permissions in the installation directory for the AMD chipset driver could...8.5 High
- amd athlon™ 3000 series desktop processors with radeon™ graphics (formerly codenamed "picasso"), athlon™ 3000 series mobile processors with radeon™ graphics (formerly codenamed "dali"), athlon™ 3000 series mobile processors with radeon™ graphics (formerly codenamed "picasso") +41 more +43 moreImproper input validation in the AMD Secure Processor (ASP) PCI driver could allow a local...6.9 Medium
- amd athlon™ 3000 series desktop processors with radeon™ graphics (formerly codenamed "picasso"), athlon™ 3000 series mobile processors with radeon™ graphics (formerly codenamed "dali"), athlon™ 3000 series mobile processors with radeon™ graphics (formerly codenamed "picasso") +49 more +51 moreIncorrect default permissions in the installation directory for the AMD general-purpose input...7.0 High
- amd epyc™ 4004, epyc™ 4005, ryzen™ 6000 series processors with radeon™ graphics +15 more +17 moreImproper input validation in the AMD OverDrive (AOD) System Management Mode (SMM) module could...4.6 Medium
- amd epyc™ 4004 series processors, epyc™ 4005 series processors, ryzen™ 7000 series desktop processors +21 more +23 moreA System Management Mode (SMM) handler could perform a callout to code located in non-SMM...5.4 Medium
- oalders www::mechanize::cached, www\ +1 moreWWW::Mechanize::Cached versions before 2.00 for Perl deserialize cached HTTP responses from a world-writable on-disk cache, enabling local response forgery and code execution5.3 Medium
- No product listedOinone Pamirs 7.0.0 contains a command injection vulnerability in CommandHelper.executeCommands....7.3 High
- No product listedOinone Pamirs 7.0.0 contains an XML External Entity (XXE) issue in its XStream-based XML parsing...6.5 Medium
- No product listedOinone Pamirs 7.0.0 contains a code execution vulnerability via ScriptRunner. The method...6.5 Medium
smtp-servernpmsmtp-server's command parser memory exhaustion denial-of-service7.5 High- red hat enterprise linux 6, enterprise linux 7, enterprise linux 8 +2 moreA buffer underflow vulnerability has been identified in the ogg123 utility from the vorbis-tools...8.2 High
- No product listedMedical Management System a81df1ce700a9662cb136b27af47f4cbde64156b is vulnerable to Insecure...6.5 Medium
- No product listedORSEE (Online Recruitment System for Economic Experiments) 3.1.0 contains an authenticated Remote...6.3 Medium
netatalkDebiansecurity updateNo scorenetatalkDebiansecurity updateNo scorenetatalkDebiansecurity updateNo score- hashgraph guardianHedera Guardian Authentication Bypass Information Disclosure6.9 Medium
- mongodb php driverPHP Stack Exhaustion6.0 Medium
- modelcontextprotocol registryMCP Registry: OCI ownership validation fails open on upstream rate limits, allowing attacker-controlled package claims3.5 Low
- Show moreLoading…