İçeriğe atla
Noroxi

AMD kayıtları

amd üreticisine ait 302 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
6
Düzeltme kaydı olan
%19,9
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22
  7. 23
  8. 24
  9. 25
  10. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

302 kayıt
  • CVE-2019-5049
    41Planlayın

    An exploitable memory corruption vulnerability exists in AMD ATIDXX64.DLL driver, versions 25.20.15031.5004 and 25.20.15031.9002.

    KritikCVSS 10,0İstismar yokEPSS %2

    amd · radeon rx 550 firmware31 Eki 2019

  • CVE-2020-6103
    40Planlayın

    An exploitable code execution vulnerability exists in the Shader functionality of AMD Radeon DirectX 11 Driver atidxx64.dll 26.20.15019.1900

    KritikCVSS 9,9İstismar yokEPSS %3

    amd · radeon directx 11 driver atidxx64.dll20 Tem 2020

  • CVE-2020-6101
    40Planlayın

    An exploitable code execution vulnerability exists in the Shader functionality of AMD Radeon DirectX 11 Driver atidxx64.dll 26.20.15019.1900

    KritikCVSS 9,9İstismar yokEPSS %3

    amd · radeon directx 11 driver atidxx64.dll20 Tem 2020

  • CVE-2020-6102
    40Planlayın

    An exploitable code execution vulnerability exists in the Shader functionality of AMD Radeon DirectX 11 Driver atidxx64.dll 26.20.15019.1900

    KritikCVSS 9,9İstismar yokEPSS %3

    amd · radeon directx 11 driver atidxx64.dll20 Tem 2020

  • CVE-2019-7247
    40Planlayın

    An issue was discovered in AODDriver2.sys in AMD OverDrive.

    KritikCVSS 9,8İstismar yokEPSS %2

    amd · overdrive18 May 2020

  • CVE-2020-6100
    40Planlayın

    An exploitable memory corruption vulnerability exists in AMD atidxx64.dll 26.20.15019.19000 graphics driver.

    KritikCVSS 9,9İstismar yokEPSS %2

    amd · radeon directx 11 driver atidxx64.dll20 Tem 2020

  • CVE-2023-20591
    40Planlayın

    Improper re-initialization of IOMMU during the DRTM event may permit an untrusted platform configuration to persist, allowing an attacker to

    KritikCVSS 10,0İstismar yokEPSS %0

    amd · epyc 8024pn firmware13 Ağu 2024

  • CVE-2021-26334
    39İzleyin

    AMD Chipset Driver Information Disclosure Vulnerability

    KritikCVSS 9,9İstismar yokEPSS %1

    amd · amd uprof1 Ara 2021

  • CVE-2023-20596
    39İzleyin

    Improper input validation in the SMM Supervisor may allow an attacker with a compromised SMI handler to gain Ring0 access potentially leadin

    KritikCVSS 9,8İstismar yokEPSS %1

    amd · ryzen 7 5700g firmware14 Kas 2023

  • CVE-2023-20586
    39İzleyin

    Radeon™ Software Crimson ReLive Edition

    KritikCVSS 9,8İstismar yokEPSS %1

    amd · radeon software8 Ağu 2023

  • CVE-2022-23821
    39İzleyin

    Improper access control in System Management Mode (SMM) may allow an attacker to write to SPI ROM potentially leading to arbitrary code exec

    KritikCVSS 9,8İstismar yokEPSS %1

    amd · ryzen 9 3900 firmware14 Kas 2023

  • CVE-2023-20520
    39İzleyin

    Improper access control settings in ASP Bootloader may allow an attacker to corrupt the return address causing a stack-based buffer overrun

    KritikCVSS 9,8İstismar yokEPSS %1

    amd · epyc 72f3 firmware9 May 2023

  • CVE-2021-46760
    39İzleyin

    A malicious or compromised UApp or ABL can send a malformed system call to the bootloader, which may result in an out-of-bounds memory acces

    KritikCVSS 9,8İstismar yokEPSS %1

    amd · ryzen 3945wx firmware9 May 2023

  • CVE-2022-23820
    39İzleyin

    Failure to validate the AMD SMM communication buffer may allow an attacker to corrupt the SMRAM potentially leading to arbitrary code execut

    KritikCVSS 9,8İstismar yokEPSS %1

    amd · ryzen 9 3900 firmware14 Kas 2023

  • CVE-2021-26379
    39İzleyin

    Insufficient input validation of mailbox data in the SMU may allow an attacker to coerce the SMU to corrupt SMRAM, potentially leading to a

    KritikCVSS 9,8İstismar yokEPSS %1

    amd · epyc 72f3 firmware9 May 2023

  • CVE-2023-39281
    39İzleyin

    A stack buffer overflow vulnerability discovered in AsfSecureBootDxe in Insyde InsydeH2O with kernel 5.0 through 5.5 allows attackers to run

    KritikCVSS 9,8İstismar yokEPSS %0

    insyde · insydeh2o1 Kas 2023

  • CVE-2019-5183
    37İzleyin

    An exploitable type confusion vulnerability exists in AMD ATIDXX64.DLL driver, versions 26.20.13031.10003, 26.20.13031.15006 and 26.20.13031

    KritikCVSS 9,0İstismar yokEPSS %2

    amd · atidxx6425 Oca 2020

  • CVE-2018-8930
    37İzleyin

    The AMD EPYC Server, Ryzen, Ryzen Pro, and Ryzen Mobile processor chips have insufficient enforcement of Hardware Validated Boot, aka MASTER

    KritikCVSS 9,0İstismar yokEPSS %2

    amd · ryzen mobile firmware22 Mar 2018

  • CVE-2018-8936
    37İzleyin

    The AMD EPYC Server, Ryzen, Ryzen Pro, and Ryzen Mobile processor chips allow Platform Security Processor (PSP) privilege escalation.

    KritikCVSS 9,0İstismar yokEPSS %2

    amd · ryzen mobile firmware22 Mar 2018

  • CVE-2018-8935
    37İzleyin

    The Promontory chipset, as used in AMD Ryzen and Ryzen Pro platforms, has a backdoor in the ASIC, aka CHIMERA-HW.

    KritikCVSS 9,0İstismar yokEPSS %2

    amd · ryzen pro firmware22 Mar 2018

  • CVE-2018-8934
    37İzleyin

    The Promontory chipset, as used in AMD Ryzen and Ryzen Pro platforms, has a backdoor in firmware, aka CHIMERA-FW.

    KritikCVSS 9,0İstismar yokEPSS %2

    amd · ryzen pro firmware22 Mar 2018

  • CVE-2020-12138
    36İzleyin

    AMD ATI atillk64.sys 5.11.9.0 allows low-privileged users to interact directly with physical memory by calling one of several driver routine

    YüksekCVSS 8,8İstismar yokEPSS %3

    amd · atillk6427 Nis 2020

  • CVE-2018-8932
    36İzleyin

    The AMD Ryzen and Ryzen Pro processor chips have insufficient access control for the Secure Processor, aka RYZENFALL-2, RYZENFALL-3, and RYZ

    KritikCVSS 9,0İstismar yokEPSS %2

    amd · ryzen pro firmware22 Mar 2018

  • CVE-2018-8931
    36İzleyin

    The AMD Ryzen, Ryzen Pro, and Ryzen Mobile processor chips have insufficient access control for the Secure Processor, aka RYZENFALL-1.

    KritikCVSS 9,0İstismar yokEPSS %2

    amd · ryzen mobile firmware22 Mar 2018

  • CVE-2018-8933
    36İzleyin

    The AMD EPYC Server processor chips have insufficient access control for protected memory regions, aka FALLOUT-1, FALLOUT-2, and FALLOUT-3.

    KritikCVSS 9,0İstismar yokEPSS %2

    amd · epyc server firmware22 Mar 2018