Amd Ryzen™ Ai 300 Series Processors

A System Management Mode (SMM) handler could perform a callout to code located in non-SMM/untrusted memory. A highly privileged attacker could, with active user interaction and under high complexity and present preconditions, trigger execution of attacker-controlled code in SMM, potentially compromising the system’s confidentiality, integrity, and availability.

Published: 2026-05-15T01:41:25.568Z
Updated: 2026-05-19T21:01:36.151Z

Incorrect default permissions in the installation directory for the AMD chipset driver could allow an attacker to achieve privilege escalation resulting in arbitrary code execution.

Published: 2026-05-15T01:46:24.662Z
Updated: 2026-05-16T03:56:10.732Z

Improper privilege management in the KVM key download component could allow an attacker to swap tokens and download sensitive keys, potentially resulting in unauthorized access to privileged resources and loss of confidentiality.

Published: 2026-05-14T14:31:47.962Z
Updated: 2026-05-14T15:35:04.518Z

Missing authentication in the KVM key download endpoint could allow an unauthenticated attacker with knowledge of the exposed URL to retrieve sensitive keys, potentially leading to loss of confidentiality.

Published: 2026-05-14T14:32:10.195Z
Updated: 2026-05-14T15:35:55.110Z

Improper isolation of shared resources on a system on a chip by a malicious local attacker with high privileges could potentially lead to a partial loss of integrity.

Published: 2026-02-10T19:13:52.680Z
Updated: 2026-02-11T15:05:51.951Z