AMD EPYC™ 9004 Series Processors at a glance
- Last 12 months
- 35
- Critical · all time
- 0
- Exploited · all time
- 0
- Public exploit · all time
- 1
Show as table
| Month | Vulnerabilities | Critical |
|---|---|---|
| Nov 2026 | 15 | 0 |
| Oct 2026 | 0 | 0 |
| Sep 2026 | 0 | 0 |
| Aug 2026 | 0 | 0 |
| Jul 2026 | 0 | 0 |
| Jun 2026 | 1 | 0 |
| May 2026 | 4 | 0 |
| Apr 2026 | 3 | 0 |
| Mar 2026 | 0 | 0 |
| Feb 2026 | 10 | 0 |
| Jan 2026 | 1 | 0 |
| Dec 2025 | 0 | 0 |
| Nov 2025 | 1 | 0 |
| Oct 2025 | 0 | 0 |
| Sep 2025 | 4 | 0 |
| Aug 2025 | 0 | 0 |
| Jul 2025 | 2 | 0 |
| Jun 2025 | 0 | 0 |
| May 2025 | 0 | 0 |
| Apr 2025 | 0 | 0 |
| Mar 2025 | 0 | 0 |
| Feb 2025 | 0 | 0 |
| Jan 2025 | 0 | 0 |
| Dec 2024 | 0 | 0 |
44 results · Feed
-
Medium 6.0
An out-of-bounds read vulnerability in the IOMMU could allow a malicious guest to corrupt hypervisor (HV) pages and pot…
-
High 7.0
Improper exception handling in IOMMU could allow an invalidate command to be sent to PCIe devices that do not support A…
-
Medium 4.6
Missing Lock Bit Protection in the Northbridge IO (NBIO) could allow a privileged attacker to use an intentionally disa…
-
Medium 6.8
Operation on a resource after expiration or release in the Secure Encrypted Virtualization (SEV) firmware could allow a…
-
Medium 6.0
Incorrect usage of seeds in pseudo-random number generator in the Secure Encrypted Virtualization (SEV) firmware could …
-
Medium 5.9
Use of a per-part static key in the ASP Bootloader could allow an attacker to downgrade the Secure Encrypted Virtualiza…
-
Medium 5.9
Improper enforcement of behavioral workflow in AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicio…
-
Medium 5.9
Improper Access Control Applied to Mirrored or Aliased Memory Regions in AMD Secure Encrypted Virtualization (SEV) firm…
-
Medium 4.6
Improper preservation of consistency between independent representations of shared state in AMD Secure Encrypted Virtua…
-
Medium 4.6
Authentication bypass by spoofing in AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervi…
-
Medium 4.0
An off-by-one error in AMD Secure Encrypted Virtualization (SEV) firmware could allow an attacker with hypervisor acces…
-
Medium 5.9
Improper check for unusual or exceptional conditions in AMD Secure Encrypted Virtualization - Secure Nested Paging (SEV…
-
Medium 5.9
Improper access control in AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to byp…
-
Medium 5.9
Improper resource reuse in the AMD Secure Encrypted Virtualization (SEV) firmware could allow an attacker with hypervis…
-
Medium 5.9
Improper validation of unsafe equivalence in input could allow an attacker with high privileges to reclaim the ring buf…
-
Medium 4.0
Improper access control for register interface in the Input-Output Memory Management Unit (IOMMU) could allow a privile…
-
High 8.5
Incorrect default permissions in the installation directory for the AMD chipset driver could allow an attacker to achie…
-
High 7.0
Incorrect default permissions in the installation directory for the AMD general-purpose input/output controller (GPIO) …
-
High 8.5
Missing lock bit protection for NBIO registers could allow a local admin-privileged attacker to gain arbitrary System M…
-
Medium 5.9
Missing lock bit protection for NBIO registers could allow a local admin-privileged attacker to modify MMIO routing con…
-
High 7.1
Incorrect use of boot service in the AMD Platform Configuration Blob (APCB) SMM driver could allow a privileged attacke…
-
Medium 5.9
A missing lock verification in AMD Secure Processor (ASP) firmware may permit a locally authenticated attacker with adm…
-
Medium 5.6
Insufficient checks of the RMP on host buffer access in IOMMU may allow an attacker with privileges and a compromised h…
-
High 8.3
Improper handling of direct memory writes in the input-output memory management unit could allow a malicious guest virt…
-
High 7.0
Improper input validation in the SMM handler could allow an attacker with Ring0 access to write to SMRAM and modify exe…
-
Medium 4.6
Improper input validation in the SMM communications buffer could allow a privileged attacker to perform an out of bound…
-
Medium 4.6
A use after free in the SEV firmware could allow a malicous hypervisor to activate a migrated guest with the SINGLE_SOC…
-
Medium 4.0
Insufficient Granularity of Access Control in SEV firmware can allow a privileged attacker to create a SEV-ES Guest to …
-
Low 1.8
Missing Checks in certain functions related to RMP initialization can allow a local admin privileged attacker to cause …
-
Medium 6.9
Improper access control in secure encrypted virtualization (SEV) could allow a privileged attacker to write to the reve…
-
Medium 5.9
Improper input validation in IOMMU could allow a malicious hypervisor to reconfigure IOMMU registers resulting in loss …
-
High 7.1
Improper input validation in system management mode (SMM) could allow a privileged attacker to overwrite stack memory l…
-
Medium 6.7
Improper Prevention of Lock Bit Modification in SEV firmware could allow a privileged attacker to downgrade firmware po…
-
Medium 4.6CVE-2025-29943 Public exploit
Write what were condition within AMD CPUs may allow an admin-privileged attacker to modify the configuration of the CPU…
-
Medium 5.3
A bug within some AMD CPUs could allow a local admin-privileged attacker to run a SEV-SNP guest using stale TLB entries…
-
High 7.5
Improper input validation for DIMM serial presence detect (SPD) metadata could allow an attacker with physical access, …
-
Low 3.2
Improper initialization of CPU cache memory could allow a privileged attacker with hypervisor access to overwrite SEV-S…
-
Medium 5.3
Improper restriction of operations in the IOMMU could allow a malicious hypervisor to access guest private memory resul…
-
Low 3.2
Incomplete cleanup after loading a CPU microcode patch may allow a privileged attacker to degrade the entropy of the RD…
-
Low 3.8
A transient execution vulnerability in some AMD processors may allow a user process to infer the control registers spec…