AR
Product
AMD Ryzen™ Threadripper™ 7000 Processors
12
CVEs
0
On KEV
8.7
Max CVSS
0
New 30D
Severity mix
Critical 0High 4Medium 8Low 0
Watch
Add AMD Ryzen™ Threadripper™ 7000 Processors to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-52533 | 8.7 | Feb 12 | Improper Access Control in an on-chip debug interface could allow a privileged attacker to enable a debug interface and potentially compromise data confidentiality or integrity Affected: All versions, or not specified |
| CVE-2026-0432 | 8.5 | May 15 | Incorrect default permissions in the installation directory for the AMD chipset driver could allow an attacker to achieve privilege escalation resulting in arbitrary code… Affected: All versions, or not specified |
| CVE-2025-54502 | 7.5 | Apr 16 | Incorrect use of boot service in the AMD Platform Configuration Blob (APCB) SMM driver could allow a privileged attacker with local access (Ring 0) to achieve privilege escalation… Affected: All versions, or not specified |
| CVE-2025-29950 | 7.1 | Feb 10 | Improper input validation in system management mode (SMM) could allow a privileged attacker to overwrite stack memory leading to arbitrary code execution Affected: All versions, or not specified |
| CVE-2025-48516 | 6.9 | May 15 | Insecure default configuration state of DDR5 memory module by AGESA Bootloader Firmware could allow an attacker with local user privilege to abuse the unprotected PMIC interface… Affected: All versions, or not specified |
| CVE-2025-0045 | 6.9 | May 15 | Improper Input validation in the AMD Secure Processor (ASP) PCI driver may allow a local attacker to create a buffer overflow condition, potentially resulting in a crash or denial… Affected: All versions, or not specified |
| CVE-2025-62625 | 6.0 | May 14 | Improper privilege management in the KVM key download component could allow an attacker to swap tokens and download sensitive keys, potentially resulting in unauthorized access to… Affected: All versions, or not specified |
| CVE-2023-20572 | 5.6 | Jun 26 | An observable timing discrepancy in the ASP could allow a privileged attacker to perform a brute-force attack against the hash message authentication code, allowing the input of… Affected: All versions, or not specified |
| CVE-2026-0438 | 5.4 | May 15 | A System Management Mode (SMM) handler could perform a callout to code located in non-SMM/untrusted memory Affected: All versions, or not specified |
| CVE-2024-36343 | 4.6 | May 19 | Improper input validation in the System Management Mode (SMM) communications buffer could allow a privileged attacker to perform an out of bounds read or write to a limited… Affected: All versions, or not specified |
| CVE-2024-36345 | 4.6 | May 15 | Improper input validation in the AMD OverDrive (AOD) System Management Mode (SMM) module could allow a privileged attacker to perform an out-of-bounds read, potentially resulting… Affected: All versions, or not specified |
| CVE-2024-36310 | 4.6 | Feb 10 | Improper input validation in the SMM communications buffer could allow a privileged attacker to perform an out of bounds read or write to SMRAM potentially resulting in loss of… Affected: All versions, or not specified |
Showing 12
