High

DATE	CVE	VULNERABILITY TITLE	RISK
2021-11-16	CVE-2021-26323	Improper Input Validation vulnerability in AMD products Failure to validate SEV Commands while SNP is active may result in a potential impact to memory integrity. local low complexity amd CWE-20	7.8
2021-11-16	CVE-2021-26331	Unspecified vulnerability in AMD products AMD System Management Unit (SMU) contains a potential issue where a malicious user may be able to manipulate mailbox entries leading to arbitrary code execution. local low complexity amd	7.8
2021-11-16	CVE-2021-26335	Unspecified vulnerability in AMD products Improper input and range checking in the AMD Secure Processor (ASP) boot loader image header may allow an attacker to use attacker-controlled values prior to signature validation potentially resulting in arbitrary code execution. local low complexity amd	7.8
2021-11-16	CVE-2021-26322	Use of Insufficiently Random Values vulnerability in AMD products Persistent platform private key may not be protected with a random IV leading to a potential “two time pad attack”. network low complexity amd CWE-330	7.5
2021-11-16	CVE-2021-26326	Improper Initialization vulnerability in AMD products Failure to validate VM_HSAVE_PA during SNP_INIT may result in a loss of memory integrity. local low complexity amd CWE-665	7.8
2021-11-16	CVE-2021-26338	Unspecified vulnerability in AMD products Improper access controls in System Management Unit (SMU) may allow for an attacker to override performance control tables located in DRAM resulting in a potential lack of system resources. network low complexity amd	7.5
2021-06-11	CVE-2020-12988	Unspecified vulnerability in AMD products A potential denial of service (DoS) vulnerability exists in the integrated chipset that may allow a malicious attacker to hang the system when it is rebooted. network low complexity amd	7.5