Vulnerabilities > AMD > Ryzen

DATE CVE VULNERABILITY TITLE RISK
2018-03-22 CVE-2018-8936 Unspecified vulnerability in AMD products
The AMD EPYC Server, Ryzen, Ryzen Pro, and Ryzen Mobile processor chips allow Platform Security Processor (PSP) privilege escalation.
network
amd
critical
9.3
2018-03-22 CVE-2018-8935 Unspecified vulnerability in AMD Ryzen Firmware and Ryzen PRO Firmware
The Promontory chipset, as used in AMD Ryzen and Ryzen Pro platforms, has a backdoor in the ASIC, aka CHIMERA-HW.
network
amd
critical
9.3
2018-03-22 CVE-2018-8934 Unspecified vulnerability in AMD Ryzen Firmware and Ryzen PRO Firmware
The Promontory chipset, as used in AMD Ryzen and Ryzen Pro platforms, has a backdoor in firmware, aka CHIMERA-FW.
network
amd
critical
9.3
2018-03-22 CVE-2018-8932 Incorrect Permission Assignment for Critical Resource vulnerability in AMD Ryzen Firmware and Ryzen PRO Firmware
The AMD Ryzen and Ryzen Pro processor chips have insufficient access control for the Secure Processor, aka RYZENFALL-2, RYZENFALL-3, and RYZENFALL-4.
network
amd CWE-732
critical
9.3
2018-03-22 CVE-2018-8931 Incorrect Permission Assignment for Critical Resource vulnerability in AMD products
The AMD Ryzen, Ryzen Pro, and Ryzen Mobile processor chips have insufficient access control for the Secure Processor, aka RYZENFALL-1.
network
amd CWE-732
critical
9.3
2018-03-22 CVE-2018-8930 Unspecified vulnerability in AMD products
The AMD EPYC Server, Ryzen, Ryzen Pro, and Ryzen Mobile processor chips have insufficient enforcement of Hardware Validated Boot, aka MASTERKEY-1, MASTERKEY-2, and MASTERKEY-3.
network
amd
critical
9.3
2017-03-25 CVE-2017-7262 Improper Input Validation vulnerability in AMD Ryzen
The AMD Ryzen processor with AGESA microcode through 2017-01-27 allows local users to cause a denial of service (system hang) via an application that makes a long series of FMA3 instructions, as demonstrated by the Flops test suite.
local
low complexity
amd CWE-20
4.9