Vulnerabilidades em AMD

467 resultados
Análise Vexday

O portfólio de vulnerabilidades da AMD reúne 443 CVEs catalogadas, com 59 registros surgidos nos últimos 90 dias, indicando um ritmo de descoberta que merece acompanhamento contínuo. A taxa de exploração ativa está abaixo da média geral do catálogo, com zero entradas no CISA KEV, o que sugere pressão operacional imediata menor em comparação com outros fornecedores. No entanto, a CVE mais perigosa atualmente monitorada, CVE-2023-20588, apresenta o maior EPSS observado no conjunto (0,1241), sinalizando probabilidade não negligenciável de exploração e justificando priorização nas rotinas de patch. A falha mais frequente, CWE-20 (validação inadequada de entrada), reflete uma fragilidade estrutural recorrente no código, enquanto as 6 CVEs de severidade crítica e a existência de pelo menos uma prova de conceito pública reforçam a necessidade de gestão ativa mesmo sem exploração confirmada no momento.

CVE-2024-36321HIGHUnquoted search path within AIM-T Manageability Service can allow a local attacker to escalate privileges, potentially resulting in arbitrarEPSS 0.2%CVE-2024-21939HIGHIncorrect default permissions in the AMD Cloud Manageability Service (ACMS) Software installation directory could allow an attacker to achieEPSS 0.2%CVE-2025-0035HIGHUnquoted search path within AMD Cloud Manageability Service can allow a local attacker to escalate privileges, potentially resulting in arbiEPSS 0.2%CVE-2021-46766LOWImproper clearing of sensitive data in the ASP Bootloader may expose secret keys to a privileged attacker accessing ASP SRAM, potentially leEPSS 0.2%CVE-2025-29943MEDIUMWrite what were condition within AMD CPUs may allow an admin-privileged attacker to modify the configuration of the CPU pipeline potentiallyEPSS 0.2%CVE-2020-12946—Insufficient input validation in ASP firmware for discrete TPM commands could allow a potential loss of integrity and denial of service.EPSS 0.2%CVE-2021-26375—Insufficient General Purpose IO (GPIO) bounds check in System Management Unit (SMU) may result in access/updates from/to invalid address spaEPSS 0.2%CVE-2021-26352—Insufficient bound checks in System Management Unit (SMU) PCIe Hot Plug table may result in access/updates from/to invalid address space thaEPSS 0.2%CVE-2022-27677HIGH Failure to validate privileges during installation of AMD Ryzen™ Master may allow an attacker with low privileges to modify files potentialEPSS 0.2%CVE-2021-26348—Failure to flush the Translation Lookaside Buffer (TLB) of the I/O memory management unit (IOMMU) may lead an IO device to write to memory iEPSS 0.2%CVE-2024-21938HIGHIncorrect default permissions in the AMD Management Plugin for the Microsoft® System Center Configuration Manager (SCCM) installation directEPSS 0.2%CVE-2023-20560— EPSS 0.2%CVE-2021-26342—In SEV guest VMs, the CPU may fail to flush the Translation Lookaside Buffer (TLB) following a particular sequence of operations that includEPSS 0.2%CVE-2024-21944MEDIUMImproper input validation for DIMM serial presence detect (SPD) metadata could allow an attacker with physical access, ring0 access on a sysEPSS 0.2%CVE-2021-26372—Insufficient bound checks related to PCIE in the System Management Unit (SMU) may result in access to an invalid address space that could reEPSS 0.2%CVE-2024-21935MEDIUMImproper input validation in Satellite Management Controller (SMC) may allow an attacker with privileges to manipulate Redfish® API commandsEPSS 0.2%CVE-2021-26378—Insufficient bound checks in the System Management Unit (SMU) may result in access to an invalid address space that could result in denial oEPSS 0.2%CVE-2021-26398HIGHInsufficient input validation in SYS_KEY_DERIVE system call in a compromised user application or ABL may allow an attacker to corrupt ASP (AEPSS 0.2%CVE-2021-26388—Improper validation of the BIOS directory may allow for searches to read beyond the directory table copy in RAM, exposing out of bounds memoEPSS 0.2%CVE-2021-26373—Insufficient bound checks in the System Management Unit (SMU) may result in a system voltage malfunction that could result in denial of resoEPSS 0.2%