Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2975▼ 108 respecto a la semana anterior
Críticas / altas1449▲ 87 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior
4 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Alta (7.8) | 0.26% | — | AMD Epyc 7h12 FirmwareAMD Epyc 7f72 FirmwareAMD Epyc 7f52 FirmwareAMD Epyc 7f32 Firmware+143 | 11/1/2023 | 17/6/2026 | Failure to validate the communication buffer and communication service in the BIOS may allow an attacker to tamper with the buffer resulting in potential SMM (System Management Mode) arbitrary code execution. | |
| Modificada | Media (5.5) | 0.28% | — | AMD Epyc 7763 FirmwareAMD Epyc 7713p FirmwareAMD Epyc 7713 FirmwareAMD Epyc 7663 Firmware+80 | 11/5/2022 | 17/6/2026 | A bug in AMD CPU’s core logic may allow for an attacker, using specific code from an unprivileged VM, to trigger a CPU core hang resulting in a potential denial of service. AMD believes the specific code includes a specific x86 instruction sequence that would not be generated by compilers. | |
| Modificada | Media (5.6) | 0.29% | — | AMD Athlon X4 940 FirmwareAMD Athlon X4 950 FirmwareAMD Athlon X4 970 FirmwareAMD Athlon X4 835 Firmware+122 | 11/3/2022 | 17/6/2026 | LFENCE/JMP (mitigation V2-2) may not sufficiently mitigate CVE-2017-5715 on some AMD CPUs. | |
| Modificada | Media (6.5) | 0.32% | — | AMD Athlon X4 940 FirmwareAMD Athlon X4 950 FirmwareAMD Athlon X4 970 FirmwareAMD Athlon X4 835 Firmware+122 | 11/3/2022 | 17/6/2026 | Some AMD CPUs may transiently execute beyond unconditional direct branches, which may potentially result in data leakage. |