Vendor
AMD
467 known vulnerabilities.
AMD at a glance
Show as table
| Month | Vulnerabilities | Critical |
|---|---|---|
| Nov 2026 | 6 | 0 |
| Oct 2026 | 3 | 0 |
| Sep 2026 | 2 | 0 |
| Aug 2026 | 11 | 0 |
| Jul 2026 | 0 | 0 |
| Jun 2026 | 8 | 0 |
| May 2026 | 49 | 1 |
| Apr 2026 | 4 | 0 |
| Mar 2026 | 0 | 0 |
| Feb 2026 | 42 | 0 |
| Jan 2026 | 1 | 0 |
| Dec 2025 | 0 | 0 |
| Nov 2025 | 15 | 0 |
| Oct 2025 | 2 | 0 |
| Sep 2025 | 28 | 0 |
| Aug 2025 | 0 | 0 |
| Jul 2025 | 4 | 0 |
| Jun 2025 | 4 | 0 |
| May 2025 | 7 | 0 |
| Apr 2025 | 4 | 0 |
| Mar 2025 | 1 | 0 |
| Feb 2025 | 18 | 0 |
| Jan 2025 | 0 | 0 |
| Dec 2024 | 0 | 0 |
Most common weaknesses
Products
AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics 54
AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics 52
AMD Ryzen™ 7000 Series Desktop Processors 50
AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics 49
AMD Ryzen™ 5000 Series Desktop Processors 48
AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics 46
AMD Ryzen™ 3000 Series Desktop Processors 43
AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics 41
AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics 38
AMD Ryzen™ Embedded V2000 Series Processors 36
AMD Ryzen™ 8000 Series Desktop Processors 36
AMD Ryzen™ Embedded 8000 Series Processors 33
AMD Ryzen™ 4000 Series Desktop Processors 33
AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics 32
AMD Ryzen™ Embedded R2000 Series Processors 31
AMD EPYC™ 9004 Series Processors 31
AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics 31
AMD Ryzen™ Embedded R1000 Series Processors 30
AMD Ryzen™ Embedded 7000 Series Processors 30
AMD Ryzen™ 7045 Series Mobile Processors with Radeon™ Graphics 30
AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics 30
AMD Ryzen™ Embedded V3000 Series Processors 29
AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics 29
AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics 29
3rd Gen AMD EPYC™ 28
AMD Radeon™ PRO W6000 Series Graphics Products 28
AMD Radeon™ RX 6000 Series Graphics Products 28
AMD EPYC™ Embedded 7003 Series Processors 28
Ryzen™ Series 27
Athlon™ Series 27
AMD EPYC™ 7003 Series Processors 27
AMD EPYC™ 9005 Series Processors 27
3rd Gen AMD EPYC™ Processors 27
AMD Radeon™ RX 7000 Series Graphics Products 27
AMD Radeon Software 26
AMD Ryzen™ 9000 Series Desktop Processors 26
AMD Radeon™ PRO W7000 Series Graphics Products 26
3rd Gen EPYC 26
AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics 25
AMD Instinct™ MI300A 24
Latest advisories
-
Low max 2.0
AMD Prozessoren und Xen: Schwachstelle ermöglicht Offenlegung von Informationen
Ein lokaler Angreifer kann eine Schwachstelle in AMD Prozessoren und Xen ausnutzen, um Informationen offenzulegen.
first Apr 19, 2026 -
High max 9.1
AMD ARM und EPYC Prozessoren: Mehrere Schwachstellen
Ein lokaler Angreifer kann mehrere Schwachstellen in AMD ARM und EPYC Prozessoren ausnutzen, um Sicherheitsvorkehrungen zu umgehen und Daten zu manipulieren.
first Jun 9, 2026 -
High max 8.6
AMD Prozessor: Mehrere Schwachstellen
Ein Angreifer kann mehrere Schwachstellen in AMD Prozessor ausnutzen, um seine Privilegien zu erhöhen, beliebigen Code auszuführen – sogar mit Administratorrechten –, Daten zu manipulieren, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-…
first May 12, 2026 -
Medium max 7.7
AMD Prozessor: Mehrere Schwachstellen
Ein lokaler Angreifer kann mehrere Schwachstellen in AMD Prozessor und Dell BIOS ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuführen oder einen Denial of Service auszulösen.
first Feb 13, 2024 -
High max 8.8
AMD Radeon Graphics Products: Mehrere Schwachstellen
Ein lokaler Angreifer kann mehrere Schwachstellen in AMD Radeon ausnutzen, um sich erhöhte Privilegien zu verschaffen, beliebigen Code auszuführen, einen Denial of Service-Zustand herbeizuführen, Daten zu manipulieren, vertrauliche Informationen offenzulegen …
first Aug 12, 2025
467 results · Feed
-
Medium 6.9
An integer overflow in the DDS RGB888 loader of AMD Compressonator SDK could allow an attacker to supply a crafted DDS …
-
Medium 5.2
An out-of-bounds read condition in the AMD Compressonator SDK could allow an attacker with local access to supply a spe…
-
Medium 5.2
An out-of-bounds write (OOW) condition in the AMD Compressonator SDK could allow an attacker with local access to suppl…
-
Medium 5.2
A heap-based out-of-bounds (OOB) read vulnerability in the AMD Compressonator SDK could allow an attacker with local ac…
-
Medium 5.1
An integer overflow condition in the AMD Compressonator SDK could allow an attacker with local access to supply a speci…
-
Medium 6.9
A NULL pointer dereference in the Linux GPU driver could potentially lead to a kernel crash and result in denial of ser…
-
High 7.7
Improper input validation in the AMD ROCm Communication Collectives Library (RCCL) could allow a compromised peer rank …
-
High 7.5
Insufficient boundary validation in the USB boot mode implementation of AMD Zynq™ UltraScale+ MPSoC and RFSoC devices c…
-
Medium 5.4
In AMD Versal™ Adaptive SoC devices, insufficient boundary checks in USB boot mode—when enabled through board modificat…
-
High 7.4
A heap overflow in SMM module may allow an attacker with access to a second vulnerability that enables writing to SPI f…
-
High 7.7
Insufficient Verification of Data Authenticity in AGESA™ may allow an attacker to update SPI ROM data potentially resul…
-
Low 3.3
A malicious virtual function can invoke the certain command handlers in the SMU, causing a denial of service due to out…
-
Medium 6.4
Release of an invalid pointer in the AMD kernel mode driver (KMD) could allow a privileged attacker to create a double …
-
High 7.0
A DLL hijacking vulnerability within the AMD Ryzen Master installation could allow a local user-privileged attacker to …
-
Medium 5.6
A Use‑After‑Free (UAF) vulnerability in the AMD Ryzen™ Master Utility Driver could allow a local attacker to access ker…
-
High 7.0
Incorrect directory permissions could allow a local user to escalate their privileges, potentially resulting in arbitra…
-
High 7.0
A DLL hijacking vulnerability in AMD Power Design Manager could allow a malicious local attacker to escalate privileges…
-
High 7.3
Weak permissions in the Vitis™ Unified installation path on local Windows machines could allow a low-privileged user to…
-
High 7.3
Uncontrolled search paths in Vitis™ Unified installation path on local Windows machines could allow DLL injection into …
-
High 7.3
Weak permissions in the Vitis™ Unified installation path on local Windows machines could allow a low-privileged user to…
-
High 7.3
Uncontrolled search paths in the Vitis™ Embedded Single File Download (SFD) for local Windows installation could allow …
-
High 7.7
Observable Timing Discrepancy in the AMD Vitis Libraries ECDSA secp256k1 component could allow attackers with local acc…
-
Medium 5.6
An observable timing discrepancy in the ASP could allow a privileged attacker to perform a brute-force attack against t…
-
Low 1.8
An observable timing discrepancy in the ASP could allow a privileged attacker to perform a brute-force attack against t…
-
High 7.7
The use of insecure HTTP transport within AMD optional tools could allow an attacker to conduct a man-in-the-middle att…
-
Medium 5.3
Improper input validation for DIMM serial presence detect (SPD) metadata could allow an attacker with physical access, …
-
Medium 6.8
Unrestricted resource allocation in AMD uProf may be exploitable to consume excessive system resources, potentially lea…
-
Medium 6.8
Improper access control in AMD uProf may allow a local attacker with user privileges to write to the kernel-shared memo…
-
Medium 4.0
Improper access control for register interface in the Input-Output Memory Management Unit (IOMMU) could allow a privile…
-
High 7.1
Insufficient granularity of access control in ASP (AMD Secure Processor) may allow an attacker with an untrusted user s…
-
Medium 4.6
Improper input validation in the System Management Mode (SMM) communications buffer could allow a privileged attacker t…
-
High 7.3
Improper isolation of shared resources within the CPU operation cache on Zen 2-based products could allow an attacker t…
-
Critical 9.2
Unrestricted IP address binding in the AMD Device Metrics Exporter (ROCm ecosystem) could allow a remote attacker to pe…
-
Low 1.8
An out of bounds read in the remote management firmware could allow a privileged attacker read a limited section of mem…
-
Low 2.0
A race condition in the MxGPU-Virtualization driver’s ioctl path caused by concurrent unsynchronized access to the glob…
-
High 8.8
Improper isolation of VCN-JPEG HW register space could allow a malicious Guest Virtual Machine (VM) or a process to per…
-
High 7.0
A DLL hijacking vulnerability in the AMD Cleanup Utility could allow an attacker to achieve privilege escalation potent…
-
High 7.0
Improper verification of cryptographic signature in the Radeon RGB tool could allow a malicious file placed in the inst…
-
Medium 4.6
Improper cleanup of shared register resources in GPU firmware could allow an admin-privileged attacker from a Guest Vir…
-
Medium 6.8
Improper isolation of GPU HW register space could allow a privileged attacker in malicious Guest Virtual Machine (VM) t…