Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2989▼ 73 respecto a la semana anterior
Críticas / altas1415▲ 65 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)382▼ 128 respecto a la semana anterior
–

5 resultados, ordenados por fecha de publicación (más recientes primero)

CVEEstadoSeveridadEPSS Explotación activaTecnologías afectadasPublicada ▼Modificada Descripción
ModificadaMedia (6)0.16%—AMD Ryzen 7 5700g FirmwareAMD Ryzen 7 5700ge FirmwareAMD Ryzen 5 5600g FirmwareAMD Ryzen 5 5600gt Firmware+12513/2/20242/9/2026
Improper Access Control in the AMD SPI protection feature may allow a user with Ring0 (kernel mode) privileged access to bypass protections potentially resulting in loss of integrity and availability.
ModificadaCrítica (9.8)1.0%—AMD Ryzen 7 5700g FirmwareAMD Ryzen 7 5700ge FirmwareAMD Ryzen 5 5600g FirmwareAMD Ryzen 5 5600ge Firmware+6014/11/202317/6/2026
Improper input validation in the SMM Supervisor may allow an attacker with a compromised SMI handler to gain Ring0 access potentially leading to arbitrary code execution.
ModificadaAlta (8.1)0.45%—AMD Ryzen 3 5100 FirmwareAMD Ryzen 3 5300g FirmwareAMD Ryzen 3 5300ge FirmwareAMD Ryzen 5 5500 Firmware+6714/11/202317/6/2026
A race condition in System Management Mode (SMM) code may allow an attacker using a compromised user space to leverage CVE-2018-8897 potentially resulting in privilege escalation.
ModificadaAlta (7.8)0.21%—AMD Ryzen 3 5100 FirmwareAMD Ryzen 3 5300g FirmwareAMD Ryzen 3 5300ge FirmwareAMD Ryzen 5 5500 Firmware+6714/11/202317/6/2026
Insufficient protections in System Management Mode (SMM) code may allow an attacker to potentially enable escalation of privilege via local access.
ModificadaAlta (7.8)0.20%—AMD Ryzen 3 5100 FirmwareAMD Ryzen 3 5300g FirmwareAMD Ryzen 3 5300ge FirmwareAMD Ryzen 5 5500 Firmware+6714/11/202317/6/2026
Insufficient protections in System Management Mode (SMM) code may allow an attacker to potentially enable escalation of privilege via local access.
Orbitaley — Vulnerabilidades