AMD EPYC™ Embedded 7003 Series Processors at a glance
- Last 12 months
- 31
- Critical · all time
- 0
- Exploited · all time
- 0
- Public exploit · all time
- 1
Show as table
| Month | Vulnerabilities | Critical |
|---|---|---|
| Nov 2026 | 17 | 0 |
| Oct 2026 | 0 | 0 |
| Sep 2026 | 0 | 0 |
| Aug 2026 | 0 | 0 |
| Jul 2026 | 0 | 0 |
| Jun 2026 | 0 | 0 |
| May 2026 | 1 | 0 |
| Apr 2026 | 3 | 0 |
| Mar 2026 | 0 | 0 |
| Feb 2026 | 8 | 0 |
| Jan 2026 | 1 | 0 |
| Dec 2025 | 0 | 0 |
| Nov 2025 | 1 | 0 |
| Oct 2025 | 0 | 0 |
| Sep 2025 | 3 | 0 |
| Aug 2025 | 0 | 0 |
| Jul 2025 | 2 | 0 |
| Jun 2025 | 1 | 0 |
| May 2025 | 0 | 0 |
| Apr 2025 | 0 | 0 |
| Mar 2025 | 0 | 0 |
| Feb 2025 | 0 | 0 |
| Jan 2025 | 0 | 0 |
| Dec 2024 | 0 | 0 |
43 results · Feed
-
Medium 6.0
An out-of-bounds read vulnerability in the IOMMU could allow a malicious guest to corrupt hypervisor (HV) pages and pot…
-
Medium 5.9
Improper access control on an internal debug interface could allow a high privileged attacker to bypass memory access c…
-
High 7.0
Improper exception handling in IOMMU could allow an invalidate command to be sent to PCIe devices that do not support A…
-
Medium 4.6
Missing Lock Bit Protection in the Northbridge IO (NBIO) could allow a privileged attacker to use an intentionally disa…
-
High 8.4
Insufficient verification of data authenticity may allow a local attacker to bypass Secure Debug Unlock (SDU), potentia…
-
Medium 6.8
Operation on a resource after expiration or release in the Secure Encrypted Virtualization (SEV) firmware could allow a…
-
Medium 6.0
Incorrect usage of seeds in pseudo-random number generator in the Secure Encrypted Virtualization (SEV) firmware could …
-
Medium 5.9
Use of a per-part static key in the ASP Bootloader could allow an attacker to downgrade the Secure Encrypted Virtualiza…
-
Medium 5.9
Improper enforcement of behavioral workflow in AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicio…
-
Medium 5.9
Improper Access Control Applied to Mirrored or Aliased Memory Regions in AMD Secure Encrypted Virtualization (SEV) firm…
-
Medium 4.6
Improper preservation of consistency between independent representations of shared state in AMD Secure Encrypted Virtua…
-
Medium 4.6
Authentication bypass by spoofing in AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervi…
-
Medium 4.0
An off-by-one error in AMD Secure Encrypted Virtualization (SEV) firmware could allow an attacker with hypervisor acces…
-
Medium 5.9
Improper check for unusual or exceptional conditions in AMD Secure Encrypted Virtualization - Secure Nested Paging (SEV…
-
Medium 5.9
Improper access control in AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to byp…
-
Medium 5.9
Improper resource reuse in the AMD Secure Encrypted Virtualization (SEV) firmware could allow an attacker with hypervis…
-
Medium 5.9
Improper validation of unsafe equivalence in input could allow an attacker with high privileges to reclaim the ring buf…
-
Medium 5.9
Missing lock bit protection for NBIO registers could allow a local admin-privileged attacker to modify MMIO routing con…
-
High 7.1
Incorrect use of boot service in the AMD Platform Configuration Blob (APCB) SMM driver could allow a privileged attacke…
-
Medium 5.9
A missing lock verification in AMD Secure Processor (ASP) firmware may permit a locally authenticated attacker with adm…
-
Medium 5.6
Insufficient checks of the RMP on host buffer access in IOMMU may allow an attacker with privileges and a compromised h…
-
High 8.3
Improper handling of direct memory writes in the input-output memory management unit could allow a malicious guest virt…
-
High 8.7
Improper Access Control in an on-chip debug interface could allow a privileged attacker to enable a debug interface and…
-
Medium 4.6
A use after free in the SEV firmware could allow a malicous hypervisor to activate a migrated guest with the SINGLE_SOC…
-
Medium 4.0
Insufficient Granularity of Access Control in SEV firmware can allow a privileged attacker to create a SEV-ES Guest to …
-
Low 1.8
Missing Checks in certain functions related to RMP initialization can allow a local admin privileged attacker to cause …
-
Medium 6.9
Improper access control in secure encrypted virtualization (SEV) could allow a privileged attacker to write to the reve…
-
High 7.1
Improper input validation in system management mode (SMM) could allow a privileged attacker to overwrite stack memory l…
-
Medium 6.7
Improper Prevention of Lock Bit Modification in SEV firmware could allow a privileged attacker to downgrade firmware po…
-
Medium 4.6CVE-2025-29943 Public exploit
Write what were condition within AMD CPUs may allow an admin-privileged attacker to modify the configuration of the CPU…
-
Medium 5.3
A bug within some AMD CPUs could allow a local admin-privileged attacker to run a SEV-SNP guest using stale TLB entries…
-
High 7.5
Improper input validation for DIMM serial presence detect (SPD) metadata could allow an attacker with physical access, …
-
Medium 5.3
Improper restriction of operations in the IOMMU could allow a malicious hypervisor to access guest private memory resul…
-
Low 3.2
Incomplete cleanup after loading a CPU microcode patch may allow a privileged attacker to degrade the entropy of the RD…
-
Low 3.8
A transient execution vulnerability in some AMD processors may allow a user process to infer the control registers spec…
-
Low 3.8
A transient execution vulnerability in some AMD processors may allow a user process to infer TSC_AUX even when such a r…
-
High 7.9
Improper register access control in ASP may allow a privileged attacker to perform unauthorized access to ASP’s Crypto …
-
Medium 5.7
Improper key usage control in AMD Secure Processor (ASP) may allow an attacker with local access who has gained arbitra…
-
Medium 6.5
Improper re-initialization of IOMMU during the DRTM event may permit an untrusted platform configuration to persist, al…
-
Low 3.9
Insufficient input validation in the ABL may allow a privileged attacker with access to the BIOS menu or UEFI shell to …