Vulnerabilities
Summary — last 7 days
New vulnerabilities2,624▼ 236 vs. last week
Critical / high1,384▲ 151 vs. last week
New active exploitation (KEV)7▼ 3 vs. last week
Unscored (no CVSS)56▼ 473 vs. last week
2 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Awaiting Analysis | Medium (6.9) | 0.09% | — | AMD AgesaAIAMD Ddr5AI | 5/15/2026 | 6/17/2026 | Insecure default configuration state of DDR5 memory module by AGESA Bootloader Firmware could allow an attacker with local user privilege to abuse the unprotected PMIC interface to create a permanent denial of service condition or affect the integrity of the memory module. | |
| Deferred | High (7.1) | 0.30% | — | Skhynix Ddr5AI | 9/15/2025 | 6/17/2026 | Vulnerability in SK Hynix DDR5 on x86 allows a local attacker to trigger Rowhammer bit flips impacting the Hardware Integrity and the system's security. This issue affects DDR5: DIMMs produced from 2021-1 until 2024-12. |