Amd Ryzen™ 8040 Series Mobile Processors With Radeon™ Graphics

A System Management Mode (SMM) handler could perform a callout to code located in non-SMM/untrusted memory. A highly privileged attacker could, with active user interaction and under high complexity and present preconditions, trigger execution of attacker-controlled code in SMM, potentially compromising the system’s confidentiality, integrity, and availability.

Published: 2026-05-15T01:41:25.568Z
Updated: 2026-05-19T21:01:36.151Z

Incorrect default permissions in the installation directory for the AMD chipset driver could allow an attacker to achieve privilege escalation resulting in arbitrary code execution.

Published: 2026-05-15T01:46:24.662Z
Updated: 2026-05-16T03:56:10.732Z

Improper privilege management in the KVM key download component could allow an attacker to swap tokens and download sensitive keys, potentially resulting in unauthorized access to privileged resources and loss of confidentiality.

Published: 2026-05-14T14:31:47.962Z
Updated: 2026-05-14T15:35:04.518Z

Missing authentication in the KVM key download endpoint could allow an unauthenticated attacker with knowledge of the exposed URL to retrieve sensitive keys, potentially leading to loss of confidentiality.

Published: 2026-05-14T14:32:10.195Z
Updated: 2026-05-14T15:35:55.110Z

Incorrect use of boot service in the AMD Platform Configuration Blob (APCB) SMM driver could allow a privileged attacker with local access (Ring 0) to achieve privilege escalation potentially resulting in arbitrary code execution.

Published: 2026-04-16T18:46:13.377Z
Updated: 2026-07-15T01:26:07.627Z