milanpi.1.0.0.8

DATE	CVE	VULNERABILITY TITLE	RISK
2023-11-14	CVE-2021-26345	Out-of-bounds Read vulnerability in AMD products Failure to validate the value in APCB may allow a privileged attacker to tamper with the APCB token to force an out-of-bounds memory read potentially resulting in a denial of service. network low complexity amd CWE-125	4.9
2023-11-14	CVE-2021-46774	Unspecified vulnerability in AMD products Insufficient DRAM address validation in System Management Unit (SMU) may allow an attacker to read/write from/to an invalid DRAM address, potentially resulting in denial-of-service. network low complexity amd	7.5
2023-11-14	CVE-2022-23830	Unspecified vulnerability in AMD products SMM configuration may not be immutable, as intended, when SNP is enabled resulting in a potential limited loss of guest memory integrity. network low complexity amd	5.3
2023-11-14	CVE-2023-20566	Unspecified vulnerability in AMD products Improper address validation in ASP with SNP enabled may potentially allow an attacker to compromise guest memory integrity. network low complexity amd	7.5
2023-11-14	CVE-2023-20592	Unspecified vulnerability in AMD products Improper or unexpected behavior of the INVD instruction in some AMD CPUs may allow an attacker with a malicious hypervisor to affect cache line write-back behavior of the CPU leading to a potential loss of guest virtual machine (VM) memory integrity. network low complexity amd	6.5
2023-08-08	CVE-2023-20569	Information Exposure Through Discrepancy vulnerability in multiple products A side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the return address prediction. local high complexity fedoraproject debian amd microsoft CWE-203	4.7
2023-05-09	CVE-2021-26379	Unspecified vulnerability in AMD products Insufficient input validation of mailbox data in the SMU may allow an attacker to coerce the SMU to corrupt SMRAM, potentially leading to a loss of integrity and privilege escalation. network low complexity amd critical	9.8
2023-05-09	CVE-2021-26397	Unspecified vulnerability in AMD products Insufficient address validation, may allow an attacker with a compromised ABL and UApp to corrupt sensitive memory locations potentially resulting in a loss of integrity or availability. local low complexity amd	7.1