Amd Processors (Amd) - vulnerabilities (CVEs)
10 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2022-11-09. Vendor: Amd.
CVEs of Amd Processors
- CVE-2022-23824 - CVSS 5.5 (medium), 2022-11-09: IBPB may not prevent return branch predictions from being specified by pre-IBPB branch targets leading to a potential information disclosure.
- CVE-2021-46778 - CVSS 5.6 (medium), 2022-08-10: Execution unit scheduler contention may lead to a side channel vulnerability found on AMD CPU microarchitectures codenamed “Zen 1”, “Zen 2” and “Zen 3” that…
- CVE-2022-23825 - CVSS 6.5 (medium), 2022-07-14: Aliases in the branch predictor may cause some AMD processors to predict the wrong branch type potentially leading to information disclosure.
- CVE-2022-29900 - CVSS 6.5 (medium), 2022-07-12: Mis-trained branch predictions for return instructions may allow arbitrary speculative code execution under certain microarchitecture-dependent conditions.
- CVE-2022-23823 - CVSS 6.5 (medium), 2022-06-15: A potential vulnerability in some AMD processors using frequency scaling may allow an authenticated attacker to execute a timing attack to potentially enable…
- CVE-2021-46744 - CVSS 6.5 (medium), 2022-05-11: An attacker with access to a malicious hypervisor may be able to infer data values used in a SEV guest on AMD CPUs by monitoring ciphertext values over time.
- CVE-2021-26400 - CVSS 4 (medium), 2022-05-11: AMD processors may speculatively re-order load instructions which can result in stale data being observed when multiple processors are operating on shared…
- CVE-2021-26401 - CVSS 5.6 (medium), 2022-03-11: LFENCE/JMP (mitigation V2-2) may not sufficiently mitigate CVE-2017-5715 on some AMD CPUs.
- CVE-2021-26341 - CVSS 6.5 (medium), 2022-03-11: Some AMD CPUs may transiently execute beyond unconditional direct branches, which may potentially result in data leakage.
- CVE-2020-12890 - CVSS 6.7 (medium), 2021-12-10: Improper handling of pointers in the System Management Mode (SMM) handling code may allow for a privileged attacker with physical or administrative access to…
