High

DATE	CVE	VULNERABILITY TITLE	RISK
2022-05-12	CVE-2021-26317	Unspecified vulnerability in AMD products Failure to verify the protocol in SMM may allow an attacker to control the protocol and modify SPI flash resulting in a potential arbitrary code execution. local low complexity amd	7.8
2022-05-12	CVE-2021-26386	Out-of-bounds Write vulnerability in AMD products A malicious or compromised UApp or ABL may be used by an attacker to issue a malformed system call to the Stage 2 Bootloader potentially leading to corrupt memory and code execution. local low complexity amd CWE-787	7.8
2022-05-12	CVE-2021-26366	Unspecified vulnerability in AMD products An attacker, who gained elevated privileges via some other vulnerability, may be able to read data from Boot ROM resulting in a loss of system integrity. local low complexity amd	7.1
2022-05-12	CVE-2021-26369	Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in AMD products A malicious or compromised UApp or ABL may be used by an attacker to send a malformed system call to the bootloader, resulting in out-of-bounds memory accesses. local low complexity amd CWE-119	7.8