CVE-2026-0438mediumCWE-1072

CVE-2026-0438: falha de média gravidade em AMD EPYC™ 4004 Series Processors

Publicada em 15 mai 2026 · Atualizada em 19 mai 2026

Seguir esta CVE + Monitorar AMD Ryzen™ 7000 Series Desktop Processors + Monitorar AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 5.4epss 0.1%

A System Management Mode (SMM) handler could perform a callout to code located in non-SMM/untrusted memory. A highly privileged attacker could, with active user interaction and under high complexity and present preconditions, trigger execution of attacker-controlled code in SMM, potentially compromising the system’s confidentiality, integrity, and availability.

CVSS:4.0/AV:P/AC:H/AT:P/PR:H/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Produtos afetados

CVEs relacionadas — AMD EPYC™ 4004 Series Processors

No mesmo produto, das mais perigosas para as menos.

CVE-2023-31315HIGHCVE-2023-31315EPSS 0.6%CVE-2024-36350MEDIUMCVE-2024-36350EPSS 0.5%CVE-2024-36357MEDIUMCVE-2024-36357EPSS 0.4%CVE-2024-21961MEDIUMCVE-2024-21961EPSS 0.3%CVE-2024-36348LOWCVE-2024-36348EPSS 0.3%CVE-2025-62619MEDIUMCVE-2025-62619EPSS 0.3%

Referências

https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-3030.html https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-4017.html