milanpi.sp3.1.0.0.4

DATE	CVE	VULNERABILITY TITLE	RISK
2022-05-11	CVE-2021-26342	Unspecified vulnerability in AMD products In SEV guest VMs, the CPU may fail to flush the Translation Lookaside Buffer (TLB) following a particular sequence of operations that includes creation of a new virtual machine control block (VMCB). local low complexity amd	3.3
2022-05-11	CVE-2021-26347	Improper Validation of Specified Quantity in Input vulnerability in AMD products Failure to validate the integer operand in ASP (AMD Secure Processor) bootloader may allow an attacker to introduce an integer overflow in the L2 directory table in SPI flash resulting in a potential denial of service. local high complexity amd CWE-1284	4.7
2022-05-11	CVE-2021-26348	Unspecified vulnerability in AMD products Failure to flush the Translation Lookaside Buffer (TLB) of the I/O memory management unit (IOMMU) may lead an IO device to write to memory it should not be able to access, resulting in a potential loss of integrity. local low complexity amd	5.5
2022-05-11	CVE-2021-26349	Unspecified vulnerability in AMD products Failure to assign a new report ID to an imported guest may potentially result in an SEV-SNP guest VM being tricked into trusting a dishonest Migration Agent (MA). local low complexity amd	5.5
2022-02-04	CVE-2020-12966	Information Exposure vulnerability in AMD products AMD EPYC™ Processors contain an information disclosure vulnerability in the Secure Encrypted Virtualization with Encrypted State (SEV-ES) and Secure Encrypted Virtualization with Secure Nested Paging (SEV-SNP). local low complexity amd CWE-200	5.5