Amd Ryzen™ 9000Hx Series Processors

A System Management Mode (SMM) handler could perform a callout to code located in non-SMM/untrusted memory. A highly privileged attacker could, with active user interaction and under high complexity and present preconditions, trigger execution of attacker-controlled code in SMM, potentially compromising the system’s confidentiality, integrity, and availability.

Published: 2026-05-15T01:41:25.568Z
Updated: 2026-05-19T21:01:36.151Z

Incorrect default permissions in the installation directory for the AMD chipset driver could allow an attacker to achieve privilege escalation resulting in arbitrary code execution.

Published: 2026-05-15T01:46:24.662Z
Updated: 2026-05-16T03:56:10.732Z

Improper handling of insufficient entropy in the AMD CPUs could allow a local attacker to influence the values returned by the RDSEED instruction, potentially resulting in the consumption of insufficiently random values.

Published: 2025-11-21T18:52:57.206Z
Updated: 2026-02-26T16:07:38.573Z

Improper privilege management in the KVM key download component could allow an attacker to swap tokens and download sensitive keys, potentially resulting in unauthorized access to privileged resources and loss of confidentiality.

Published: 2026-05-14T14:31:47.962Z
Updated: 2026-05-14T15:35:04.518Z

Missing authentication in the KVM key download endpoint could allow an unauthenticated attacker with knowledge of the exposed URL to retrieve sensitive keys, potentially leading to loss of confidentiality.

Published: 2026-05-14T14:32:10.195Z
Updated: 2026-05-14T15:35:55.110Z