AE
Product
AMD EPYC™ 9005 Series Processors
27
CVEs
0
On KEV
8.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 8Medium 17Low 2
Watch
Add AMD EPYC™ 9005 Series Processors to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-0432 | 8.5 | May 15 | Incorrect default permissions in the installation directory for the AMD chipset driver could allow an attacker to achieve privilege escalation resulting in arbitrary code… Affected: All versions, or not specified |
| CVE-2025-61972 | 8.5 | May 13 | Missing lock bit protection for NBIO registers could allow a local admin-privileged attacker to gain arbitrary System Management Network (SMN) access, potentially resulting in… Affected: All versions, or not specified |
| CVE-2023-31364 | 8.3 | Feb 26 | Improper handling of direct memory writes in the input-output memory management unit could allow a malicious guest virtual machine (VM) to flood a host with writes, potentially… Affected: All versions, or not specified |
| CVE-2025-54502 | 7.5 | Apr 16 | Incorrect use of boot service in the AMD Platform Configuration Blob (APCB) SMM driver could allow a privileged attacker with local access (Ring 0) to achieve privilege escalation… Affected: All versions, or not specified |
| CVE-2025-62626 | 7.2 | Nov 21 | Improper handling of insufficient entropy in the AMD CPUs could allow a local attacker to influence the values returned by the RDSEED instruction, potentially resulting in the… Affected: All versions, or not specified |
| CVE-2025-0032 | 7.2 | Sep 6 | Improper cleanup in AMD CPU microcode patch loading could allow an attacker with local administrator privilege to load malicious CPU microcode, potentially resulting in loss of… Affected: All versions, or not specified |
| CVE-2025-29950 | 7.1 | Feb 10 | Improper input validation in system management mode (SMM) could allow a privileged attacker to overwrite stack memory leading to arbitrary code execution Affected: All versions, or not specified |
| CVE-2025-48512 | 7.0 | May 15 | Incorrect default permissions in the installation directory for the AMD general-purpose input/output controller (GPIO) could allow an attacker to achieve privilege escalation… Affected: All versions, or not specified |
Showing 8
