Amd Epyc vulnerabilities

• amd athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 4004 series processors, epyc™ 4005 series processors +48 more +50 more Missing Lock Bit Protection in the Northbridge IO (NBIO) could allow a privileged attacker to use an intentionally disabled device as part of a remapping attack potentially impacting data confidential… CVE-2024-36309 4.6 MediumNovember 10, 2026
• amd epyc™ 7001 series processors, epyc™ 7002 series processors, epyc™ 7003 series processors +6 more +8 more Insufficient verification of data authenticity may allow a local attacker to bypass Secure Debug Unlock (SDU), potentially resulting in unauthorized debug access. CVE-2025-0008 8.4 HighNovember 10, 2026
• amd epyc™ 7003 series processors, epyc™ 8004 series processors, epyc™ 8005 series processors +7 more +9 more Operation on a resource after expiration or release in the Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to manipulate metadata pages potentially resulting in the l… CVE-2025-48504 6.8 MediumNovember 10, 2026
• amd epyc™ 7003 series processors, epyc™ 8004 series processors, epyc™ 8005 series processors +7 more +9 more Incorrect usage of seeds in pseudo-random number generator in the Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor or migration agent to import a forged guest context… CVE-2025-29941 6.0 MediumNovember 10, 2026
• amd epyc™ 7003 series processors, epyc™ 8004 series processors, epyc™ 9004 series processors +4 more +6 more Use of a per-part static key in the ASP Bootloader could allow an attacker to downgrade the Secure Encrypted Virtualization (SEV) firmware and exploit known vulnerabilities to decrypt memory potential… CVE-2026-0003 5.9 MediumNovember 10, 2026
• amd epyc™ 8005 series processors, epyc™ 9005 series processors, epyc™ embedded 9005 series processors +2 more Operation on a resource after expiration or release in the AMD Secure Encrypted Virtualization (SEV) firmware could allow an attacker with administrative privileges to swap out a guest device without… CVE-2026-0435 6.0 MediumNovember 10, 2026
• amd epyc™ 8005 series processors, epyc™ 9005 series processors, epyc™ embedded 9005 series processors +2 more An out-of-bounds write in the AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to corrupt global firmware variables, potentially resulting in loss of integrity. CVE-2026-0454 4.6 MediumNovember 10, 2026
• amd epyc™ 8005 series processors, epyc™ 9005 series processors, epyc™ embedded 9005 series processors +2 more Missing Authentication for Critical Function in AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to forge SEV-TIO guest request messages potentially compromising S… CVE-2026-0480 6.0 MediumNovember 10, 2026
• amd epyc™ 7003 series processors, epyc™ 8004 series processors, epyc™ 8005 series processors +7 more +9 more Improper enforcement of behavioral workflow in AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to potentially launch a guest whose attestation report contains an… CVE-2026-28248 5.9 MediumNovember 10, 2026
• amd epyc™ 7003 series processors, epyc™ 8004 series processors, epyc™ 8005 series processors +7 more +9 more Improper Access Control Applied to Mirrored or Aliased Memory Regions in AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to change the encryption bit for guest co… CVE-2026-28247 5.9 MediumNovember 10, 2026
• amd epyc™ 7003 series processors, epyc™ 8004 series processors, epyc™ 9004 series processors +4 more +6 more Improper preservation of consistency between independent representations of shared state in AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to potentially affect… CVE-2026-28249 4.6 MediumNovember 10, 2026
• amd epyc™ 7003 series processors, epyc™ 8004 series processors, epyc™ 8005 series processors +7 more +9 more Authentication bypass by spoofing in AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to request attestation reports for VMPL 0. CVE-2026-40668 4.6 MediumNovember 10, 2026
• amd epyc™ 7003 series processors, epyc™ 8004 series processors, epyc™ 9004 series processors +4 more +6 more An off-by-one error in AMD Secure Encrypted Virtualization (SEV) firmware could allow an attacker with hypervisor access to corrupt the Reverse Map Table (RMP) table, potentially resulting in loss of… CVE-2026-40669 4.0 MediumNovember 10, 2026
• amd epyc™ 7003 series processors, epyc™ 8004 series processors, epyc™ 8005 series processors +7 more +9 more Improper check for unusual or exceptional conditions in AMD Secure Encrypted Virtualization - Secure Nested Paging (SEV-SNP) could allow a privileged attacker to potentially overlap MMIO regions with… CVE-2026-40670 5.9 MediumNovember 10, 2026
• amd epyc™ 7003 series processors, epyc™ 8004 series processors, epyc™ 9004 series processors +6 more +8 more Improper access control in AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to bypass Reverse Map Table (RMP) protections, potentially impacting the integrity of S… CVE-2025-0027 5.9 MediumNovember 10, 2026
• amd epyc™ 9005 series processors, epyc™ embedded 9005 series processors +1 more Unverified ownership in Secure Encrypted Virtualization (SEV) firmware could allow a privileged attacker with access to a malicious hypervisor to overwrite guest memory if segmented Reverse Map Table… CVE-2025-29940 5.9 MediumNovember 10, 2026
• amd epyc™ 9005 series processors, epyc™ embedded 9005 series processors +1 more Improper access control within the AMD Secure Encrypted Virtualization (SEV) firmware could allow an attacker with administrative privileges to tamper with memory, potentially resulting in loss of gue… CVE-2025-52537 4.0 MediumNovember 10, 2026
• amd epyc™ 7003 series processors, epyc™ 8004 series processors, epyc™ 9004 series processors +6 more +8 more Improper resource reuse in the AMD Secure Encrypted Virtualization (SEV) firmware could allow an attacker with hypervisor access to write to the Reverse Map Table (RMP) protected memory, potentially r… CVE-2025-52535 5.9 MediumNovember 10, 2026
• amd epyc™ 9005 series processors, epyc™ embedded 9005 series processors +1 more A time-of-check to time-of-use (TOCTOU) race condition in the AMD SEV Secure Encrypted Virtualization (SEV) firmware could allow an attacker with administrative privileges to bypass security checks on… CVE-2025-54506 4.0 MediumNovember 10, 2026
• amd epyc™ 9005 series processors, epyc™ embedded 9005 series processors +1 more Improper handling of overlap between protected memory ranges in the Secure Encrypted Virtualization (SEV) firmware could allow a privileged attacker to cause misconfigurations in the RMP potentially r… CVE-2025-54503 5.9 MediumNovember 10, 2026
• amd epyc™ 9005 series processors, epyc™ embedded 9005 series processors +1 more Improper validation of Reverse Map Table (RMP) entries in the Secure Encrypted Virtualization (SEV) firmware could allow a privileged attacker to trigger concurrent modifications to RMP entries withou… CVE-2025-54508 4.0 MediumNovember 10, 2026
• amd epyc™ 9005 series processors, epyc™ embedded 9005 series processors +1 more Insufficient Granularity of Access Control in AMD Secure Encrypted Virtualization (SEV) firmware could allow an attacker with administrative privileges attacker to write to a trusted region used by AM… CVE-2025-54504 5.9 MediumNovember 10, 2026
• amd epyc™ 7003 series processors, epyc™ 8004 series processors, epyc™ 9004 series processors +6 more +8 more Improper validation of unsafe equivalence in input could allow an attacker with high privileges to reclaim the ring buffer queue status page, potentially resulting in loss of guest memory integrity. CVE-2025-62620 5.9 MediumNovember 10, 2026
• amd epyc™ 9005 series processors, epyc™ embedded 9005 series processors +1 more Expected behavior violation in AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to bypass Reverse Map Table (RMP) protections, potentially resulting in a loss of S… CVE-2025-62621 5.9 MediumNovember 10, 2026
• amd athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 4004 series processors, epyc™ 4005 series processors +38 more +40 more A NULL pointer dereference in the Linux GPU driver could potentially lead to a kernel crash and... CVE-2026-43603 6.9 MediumNovember 3, 2026
• amd 2nd gen amd epyc™ processors, 3rd gen amd epyc™ processors, 4th gen amd epyc™ processors +31 more +33 more A heap overflow in SMM module may allow an attacker with access to a second vulnerability that... CVE-2023-20577 7.4 HighSeptember 2, 2026
• amd epyc™ 7003 series processors, epyc™ 9004 series processor +1 more Improper input validation for DIMM serial presence detect (SPD) metadata could allow an attacker... CVE-2024-21944 5.3 MediumJune 10, 2026
• amd epyc™ 8004 series processors, epyc™ 9004 series processors, epyc™ 9005 series processors +4 more +6 more Improper access control for register interface in the input-output memory management unit (IOMMU)... CVE-2025-54509 4.0 MediumJune 9, 2026
• amd epyc™ 4004, epyc™ 4005, ryzen™ 6000 series processors with radeon™ graphics +14 more +16 more Improper input validation in the System Management Mode (SMM) communications buffer could allow a... CVE-2024-36343 4.6 MediumMay 19, 2026
• amd epyc™ 7002 series processors, epyc™ embedded 7002 series processors, ryzen embedded v2000a series processors +31 more +33 more Improper isolation of shared resources within the CPU operation cache on Zen 2-based products... CVE-2025-54518 Fix available 7.3 HighMay 15, 2026
• amd athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 4004 series processors, epyc™ 4005 series processors +25 more +27 more Improper Input Validation in the AMD RAID driver could allow an attacker to point to an arbitrary... CVE-2024-21962 8.6 HighMay 15, 2026
• amd epyc™ 4004 series processors, epyc™ 4005 series processors, epyc™ embedded 4004 series processors +37 more +39 more Improper Input validation in the AMD Secure Processor (ASP) PCI driver may allow a local attacker... CVE-2025-0045 6.9 MediumMay 15, 2026
• amd athlon™ 3000 series desktop processors with radeon™ graphics, athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 4004 series processors +43 more +45 more Incorrect default permissions in the installation directory for the AMD chipset driver could... CVE-2026-0432 8.5 HighMay 15, 2026
• amd athlon™ 3000 series desktop processors with radeon™ graphics (formerly codenamed "picasso"), athlon™ 3000 series mobile processors with radeon™ graphics (formerly codenamed "dali"), athlon™ 3000 series mobile processors with radeon™ graphics (formerly codenamed "picasso") +41 more +43 more Improper input validation in the AMD Secure Processor (ASP) PCI driver could allow a local... CVE-2025-48521 6.9 MediumMay 15, 2026
• amd athlon™ 3000 series desktop processors with radeon™ graphics (formerly codenamed "picasso"), athlon™ 3000 series mobile processors with radeon™ graphics (formerly codenamed "dali"), athlon™ 3000 series mobile processors with radeon™ graphics (formerly codenamed "picasso") +49 more +51 more Incorrect default permissions in the installation directory for the AMD general-purpose input... CVE-2025-48512 7.0 HighMay 15, 2026
• amd epyc™ 4004, epyc™ 4005, ryzen™ 6000 series processors with radeon™ graphics +15 more +17 more Improper input validation in the AMD OverDrive (AOD) System Management Mode (SMM) module could... CVE-2024-36345 4.6 MediumMay 15, 2026
• amd epyc™ 4004 series processors, epyc™ 4005 series processors, ryzen™ 7000 series desktop processors +21 more +23 more A System Management Mode (SMM) handler could perform a callout to code located in non-SMM... CVE-2026-0438 5.4 MediumMay 15, 2026
• amd epyc™ 8004 series processors, epyc™ embedded 8004 series processors, epyc™ embedded 9004 series processors (formerly codenamed "bergamo") +14 more +16 more Improper enforcement of the LFENCE serialization property may allow an attacker to bypass... CVE-2024-36315 Fix available 5.7 MediumMay 13, 2026
• amd epyc™ 8004 series processors, epyc™ 9004 series processors, epyc™ 9005 series processors +4 more +6 more Missing lock bit protection for NBIO registers could allow a local admin-privileged attacker to gain arbitrary System Management Network (SMN) access, potentially resulting in arbitrary code execution… CVE-2025-61972 8.5 HighMay 13, 2026
• amd epyc™ 7003 series processors, epyc™ 8004 series processors, epyc™ 9004 series processors +6 more +8 more Missing lock bit protection for NBIO registers could allow a local admin-privileged attacker to modify MMIO routing configurations, potentially resulting in loss of SEV-SNP guest integrity. CVE-2025-61971 5.9 MediumMay 13, 2026
• amd epyc™ 7001 series processors, epyc™ embedded 3000 series processors +1 more A transient execution vulnerability within AMD CPUs may allow a local user-privileged attacker to... CVE-2025-54505 Public exploitFix available 2.0 LowApril 27, 2026
• amd athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 4004 series processors, epyc™ 7002 series processors +59 more +61 more Incorrect use of boot service in the AMD Platform Configuration Blob (APCB) SMM driver could... CVE-2025-54502 7.1 HighApril 16, 2026
• amd epyc™ 7003 series processors, epyc™ 8004 series processors, epyc™ 9004 series processors +6 more +8 more A missing lock verification in AMD Secure Processor (ASP) firmware may permit a locally... CVE-2025-54510 5.9 MediumApril 16, 2026
• amd epyc™ 7003 series processors, epyc™ 9004 series processors, epyc™ embedded 7003 series processors +1 more +3 more Insufficient checks of the RMP on host buffer access in IOMMU may allow an attacker with... CVE-2023-20585 Fix available 5.6 MediumApril 16, 2026
• amd athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 7001 series processors, epyc™ 7002 series processors +30 more +32 more Improper handling of direct memory writes in the input-output memory management unit could allow... CVE-2023-31364 8.3 HighFebruary 26, 2026
• amd epyc™ 7002 series processors, epyc™ embedded 7002 series processors, ryzen™ 3000 series desktop processors +19 more +21 more Improper restriction of operations within the bounds of a memory buffer in PCIe® Link could allow... CVE-2024-21961 6.0 MediumFebruary 12, 2026
• amd athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 7001 series processors, epyc™ 7002 series processors +36 more +38 more Improper Access Control in an on-chip debug interface could allow a privileged attacker to enable... CVE-2025-52533 8.7 HighFebruary 12, 2026
• amd athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 9004 series processors, epyc™ embedded 9004 series processors (formerly codenamed "genoa") +32 more +34 more Improper input validation in the SMM handler could allow an attacker with Ring0 access to write... CVE-2024-36355 7.0 HighFebruary 10, 2026
• amd epyc™ 9004 series processors, epyc™ 9005 series processors, epyc™ embedded 9004 series processors (formerly codenamed "genoa") +15 more +17 more Improper input validation in the SMM communications buffer could allow a privileged attacker to... CVE-2024-36310 4.6 MediumFebruary 10, 2026
• amd epyc™ 9005 series processors, epyc™ embedded 9005 series processors +1 more Insufficient or Incomplete Data Removal in Hardware Component in SEV firmware doesn't fully flush... CVE-2025-29946 Fix available 4.5 MediumFebruary 10, 2026
• Show olderLoading…