Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-36290 State: PUBLISHED Published: 2025-01-14T14:21:34.838Z Last Updated: 2025-01-14T16:03:48.410Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Wavlink Products: Wavlink AC3000 Problem Types: CWE-120 Description: A buffer overflow vulnerability exists in the login.cgi Goto_chidx() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an unauthenticated HTTP request to trigger this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2024-2
DP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2024-2019
CVE ID: CVE-2024-36291 State: PUBLISHED Published: 2025-02-12T21:19:07.792Z Last Updated: 2025-02-13T20:19:10.887Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) Chipset Software Installation Utility Problem Types: Escalation of Privilege, CWE-427 Description: Uncontrolled search path for some Intel(R) Chipset Software Installation Utility before version 10.1.19867.8574 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01184.html
CVE ID: CVE-2024-36292 State: PUBLISHED Published: 2025-05-13T21:03:02.682Z Last Updated: 2025-05-14T14:09:23.126Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:H) Vendors: n/a Products: Intel(R) Data Center GPU Flex Series for Windows driver Problem Types: Denial of Service, CWE-119 Description: Improper buffer restrictions for some Intel(R) Data Center GPU Flex Series for Windows driver before version 31.0.101.4314 may allow an authenticated user to potentially enable denial of service via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01253.html
CVE ID: CVE-2024-36293 State: PUBLISHED Published: 2025-02-12T21:20:12.658Z Last Updated: 2025-11-03T20:37:42.713Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H) Vendors: n/a Products: Intel(R) Processors with Intel(R) SGX Problem Types: Denial of Service, CWE-284 Description: Improper access control in the EDECCSSA user leaf function for some Intel(R) Processors with Intel(R) SGX may allow an authenticated user to potentially enable denial of service via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01213.html
CVE ID: CVE-2024-36294 State: PUBLISHED Published: 2024-11-13T21:11:58.684Z Last Updated: 2024-11-14T19:37:29.252Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) DSA software Problem Types: escalation of privilege, CWE-277 Description: Insecure inherited permissions for some Intel(R) DSA software before version 24.3.26.8 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01200.html
CVE ID: CVE-2024-36295 State: PUBLISHED Published: 2025-01-14T14:21:04.824Z Last Updated: 2025-01-14T16:03:49.464Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Wavlink Products: Wavlink AC3000 Problem Types: CWE-74 Description: A command execution vulnerability exists in the qos.cgi qos_sta() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2024-2047
CVE ID: CVE-2024-36302 State: PUBLISHED Published: 2024-06-10T21:20:41.619Z Last Updated: 2024-08-02T03:37:05.069Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Trend Micro, Inc. Products: Trend Micro Apex One, Trend Micro Apex One as a Service Description: An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. This vulnerability is similar to, but not identical to, CVE-2024-36303. Additional Analyst Notes: - CISA
vulnerability. This vulnerability is similar to, but not identical to, CVE-2024-36303. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://success.trendmicro.com/dcx/s/solution/000298063 - https://www.zerodayinitiative.com/advisories/ZDI-24-569/
CVE ID: CVE-2024-36303 State: PUBLISHED Published: 2024-06-10T21:20:53.405Z Last Updated: 2025-03-25T18:27:04.960Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Trend Micro, Inc. Products: Trend Micro Apex One, Trend Micro Apex One as a Service Description: An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. This vulnerability is similar to, but not identical to, CVE-2024-36302. Additional Analyst Notes: - CISA
vulnerability. This vulnerability is similar to, but not identical to, CVE-2024-36302. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://success.trendmicro.com/dcx/s/solution/000298063 - https://www.zerodayinitiative.com/advisories/ZDI-24-570/
CVE ID: CVE-2024-36304 State: PUBLISHED Published: 2024-06-10T21:21:04.492Z Last Updated: 2024-08-02T03:37:04.674Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Trend Micro, Inc. Products: Trend Micro Apex One, Trend Micro Apex One as a Service Description: A Time-of-Check Time-Of-Use vulnerability in the Trend Micro Apex One and Apex One as a Service agent could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: Refe
in order to exploit this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://success.trendmicro.com/dcx/s/solution/000298063 - https://www.zerodayinitiative.com/advisories/ZDI-24-571/
CVE ID: CVE-2024-36305 State: PUBLISHED Published: 2024-06-10T21:21:14.678Z Last Updated: 2025-03-14T00:49:38.687Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Trend Micro, Inc. Products: Trend Micro Apex One, Trend Micro Apex One as a Service Description: A security agent link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://success.trendm
bility. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://success.trendmicro.com/dcx/s/solution/000298063 - https://www.zerodayinitiative.com/advisories/ZDI-24-572/
CVE ID: CVE-2024-36306 State: PUBLISHED Published: 2024-06-10T21:21:23.910Z Last Updated: 2025-03-27T20:40:36.799Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H) Vendors: Trend Micro, Inc. Products: Trend Micro Apex One, Trend Micro Apex One as a Service Description: A link following vulnerability in the Trend Micro Apex One and Apex One as a Service Damage Cleanup Engine could allow a local attacker to create a denial-of-service condition on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE
de on the target system in order to exploit this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://success.trendmicro.com/dcx/s/solution/000298063 - https://www.zerodayinitiative.com/advisories/ZDI-24-568/
CVE ID: CVE-2024-36307 State: PUBLISHED Published: 2024-06-10T21:21:32.953Z Last Updated: 2024-08-02T03:37:04.691Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Trend Micro, Inc. Products: Trend Micro Apex One, Trend Micro Apex One as a Service Description: A security agent link following vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to disclose sensitive information about the agent on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE
e on the target system in order to exploit this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://success.trendmicro.com/dcx/s/solution/000298063 - https://www.zerodayinitiative.com/advisories/ZDI-24-573/
CVE ID: CVE-2024-36321 State: PUBLISHED Published: 2025-05-13T17:05:09.839Z Last Updated: 2025-05-16T03:55:41.635Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: AMD Products: AIM-T Manageability Service Problem Types: CWE-428 Description: Unquoted search path within AIM-T Manageability Service can allow a local attacker to escalate privileges, potentially resulting in arbitrary code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/resources/product-security/bulletin/amd-sb-9015.html
CVE ID: CVE-2024-36326 State: PUBLISHED Published: 2025-09-06T17:25:46.065Z Last Updated: 2025-09-09T03:55:23.262Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N) Vendors: AMD Products: AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ AI 300 Series Processors Problem Types: CWE-862 Description: Missing authorization in AMD RomArmor could allow an attacker to bypass ROMArmor protections during system resume from a standby state, potentially resulting in a loss of confidentiality and integrity. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-4012.html
CVE ID: CVE-2024-36328 State: PUBLISHED Published: 2025-04-02T16:18:15.926Z Last Updated: 2025-04-02T16:30:20.527Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:H) Vendors: AMD Products: AMD Ryzen™ AI Software Problem Types: CWE-190 Description: Integer overflow within AMD NPU Driver could allow a local attacker to write out of bounds, potentially leading to loss of integrity or availability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7037.html
CVE ID: CVE-2024-36331 State: PUBLISHED Published: 2025-09-06T17:29:38.215Z Last Updated: 2025-11-03T17:31:10.979Z Severity: LOW (CVSS 3.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:N) Vendors: AMD Products: AMD EPYC™ 9004 Series Processors, EPYC™ Embedded 9004 Series Processors, AMD EPYC™ Embedded 9004 Series Processors Problem Types: CWE-665 Description: Improper initialization of CPU cache memory could allow a privileged attacker with hypervisor access to overwrite SEV-SNP guest memory resulting in loss of data integrity. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-5007.html - h
: - CVE Program Container: References: - https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-5007.html - https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-3014.html
CVE ID: CVE-2024-36336 State: PUBLISHED Published: 2025-04-02T16:20:06.723Z Last Updated: 2025-04-02T16:30:34.551Z Severity: HIGH (CVSS 7.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H) Vendors: AMD Products: AMD Ryzen™ AI Software Problem Types: CWE-190 Description: Integer overflow within the AMD NPU Driver could allow a local attacker to write out of bounds, potentially leading to a loss of confidentiality, integrity, or availability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7037.html
CVE ID: CVE-2024-36337 State: PUBLISHED Published: 2025-04-02T16:16:30.895Z Last Updated: 2025-04-02T16:31:05.791Z Severity: HIGH (CVSS 7.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H) Vendors: AMD Products: AMD Ryzen™ AI Software Problem Types: CWE-190 Description: Integer overflow within AMD NPU Driver could allow a local attacker to write out of bounds, potentially leading to loss of confidentiality, integrity or availability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7037.html
CVE ID: CVE-2024-36339 State: PUBLISHED Published: 2025-05-13T16:56:41.523Z Last Updated: 2025-05-16T03:55:40.276Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: AMD Products: AMD Optimizing CPU Libraries (AOCL) Problem Types: CWE-276 Description: A DLL hijacking vulnerability in the AMD Optimizing CPU Libraries could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/resources/product-security/bulletin/amd-sb-9014.html
CVE ID: CVE-2024-36340 State: PUBLISHED Published: 2025-05-13T14:04:09.613Z Last Updated: 2025-05-13T16:51:13.565Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N) Vendors: AMD Products: AMD μProf Problem Types: CWE-1386 Description: A junction point vulnerability within AMD uProf can allow a local low-privileged attacker to create junction points, potentially resulting in arbitrary file deletion or disclosure. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/resources/product-security/bulletin/amd-sb-9013.html
CVE ID: CVE-2024-36342 State: PUBLISHED Published: 2025-09-06T17:42:00.232Z Last Updated: 2025-09-23T21:27:40.844Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: AMD Products: AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics, AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics, AMD Ryzen™ 7045 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 7000 Series Desktop Processors, AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ AI
AMD Ryzen™ 7000 Series Desktop Processors, AMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ AI 300 Series Processors, AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics, AMD Ryzen™ 8000 Series Desktop Processors, AMD Ryzen™ 9000 Series Desktop Processors, AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 4000 Series Desktop Processors, AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics, AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics, AMD Ryzen™ Embedded R2000 Series Processors, AM
deon™ Graphics, AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics, AMD Ryzen™ Embedded R2000 Series Processors, AMD Ryzen™ Embedded V2000 Series Processors, AMD Ryzen™ Embedded 8000 Series, AMD Ryzen™ Embedded 7000 Series Processors, AMD Radeon™ RX 5000 Series Graphics Products, AMD Radeon™ PRO W5000 Series Graphics Products, AMD Radeon™ RX 6000 Series Graphics Products, AMD Radeon™ PRO W6000 Series Graphics Products, AMD Radeon™ RX 7000 Series Graphics Products, AMD Radeon™ PRO W7000 Series Graphics Products, AMD Radeon™ RX 9000 Series Graphics Products, AMD Radeon™ RX Vega Series Graphics Cards, AMD Radeon™ PRO VII, AMD Instinct™ MI210, AMD Instinct™ MI250, AMD Instinct™ MI300A, AMD
RX Vega Series Graphics Cards, AMD Radeon™ PRO VII, AMD Instinct™ MI210, AMD Instinct™ MI250, AMD Instinct™ MI300A, AMD Instinct™ MI300X, AMD Instinct™ MI308X, AMD Instinct™ MI325X, AMD Radeon™ PRO V520 Graphics Products, AMD Radeon™ PRO V620 Graphics Products, AMD Radeon™ PRO V710 Graphics Products Problem Types: CWE-1285 Description: Improper input validation in the GPU driver could allow an attacker to exploit a heap overflow potentially resulting in arbitrary code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-6018.html - https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-5007.ht
s/product-security/bulletin/AMD-SB-6018.html - https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-5007.html
CVE ID: CVE-2024-36346 State: PUBLISHED Published: 2025-09-06T17:43:14.113Z Last Updated: 2025-09-08T14:49:20.329Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H) Vendors: AMD Products: AMD Instinct™ MI300A, AMD Instinct™ MI300X Problem Types: CWE-1284 Description: Improper input validation in AMD Power Management Firmware (PMFW) could allow a privileged attacker from Guest VM to send arbitrary input data potentially causing a GPU Reset condition. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-6018.html
CVE ID: CVE-2024-36347 State: PUBLISHED Published: 2025-06-27T22:14:01.944Z Last Updated: 2025-07-01T03:55:54.843Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: AMD Products: AMD EPYC™ 7001 Series, AMD EPYC™ 7002 Series, AMD EPYC™ 7003 Series, AMD EPYC™ 9004 Series, AMD EPYC™ 4004 Series, AMD EPYC™ 9005 Series, AMD Instinct™ MI300A, AMD Ryzen™ 5000 Series Desktop Processors, AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics, AMD Ryzen™ 3000 Series Desktop Processors, AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics, AMD Ryzen™ 7000 Series Desktop Processors, AMD Ryzen™ 4000 Series Desktop Processor with Radeon™ Graphics, AMD Ry
phics, AMD Ryzen™ 7000 Series Desktop Processors, AMD Ryzen™ 4000 Series Desktop Processor with Radeon™ Graphics, AMD Ryzen™ 8000 Series Processor with Radeon™ Graphics, AMD Ryzen™ 9000 Series Desktop Processors, AMD Ryzen™ Threadripper™ 3000 Series Processors, AMD Ryzen™ Threadripper™ PRO 7000 WX-Series Processors, AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors, AMD Ryzen™ Threadripper™ PRO 5000WX- Series Desktop Processors, AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 3000 Series Mobile Processor with Radeon™ Graphics, AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics, AMD Ryzen™ 702
Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 5000 Series Processors with Radeon™ Graphics, AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics, AMD Ryzen™ 6000 Series Processor with Radeon™ Graphics, AMD Ryzen™ 7035 Series Processor with Radeon™ Graphics, AMD Ryzen™ 7000 Series Processors with Radeon™ Graphics, AMD Ryzen™ 7040 Series Processors with Radeon™ Graphics, AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 7045 Series Mobile Processors, AMD Ryzen™ AI 300 Series, AMD Ryzen™ AI Max +, AMD Ryzen™ 9000HX Series Mobile Processors, AMD EPYC™ Embedded 3000, AMD EPYC™ Embedded 7002, AMD EPYC™ Embedded 7003, AMD EPYC™ Embedded 8004, AMD EPYC™ Embe
sors, AMD EPYC™ Embedded 3000, AMD EPYC™ Embedded 7002, AMD EPYC™ Embedded 7003, AMD EPYC™ Embedded 8004, AMD EPYC™ Embedded 9004, AMD EPYC™ Embedded 97X4, AMD Ryzen™ Embedded R1000, AMD Ryzen™ Embedded R2000, AMD Ryzen™ Embedded 5000, AMD Ryzen™ Embedded 7000, AMD Ryzen™ Embedded V1000, AMD Ryzen™Embedded V2000, AMD Ryzen™Embedded V3000 Problem Types: CWE-347 Description: Improper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with local administrator privilege to load malicious microcode, potentially resulting in loss of integrity of x86 instruction execution, loss of confidentiality and integrity of data in x86 CPU privileged context and compromise of S
6 instruction execution, loss of confidentiality and integrity of data in x86 CPU privileged context and compromise of SMM execution environment. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7033.html
CVE ID: CVE-2024-36348 State: PUBLISHED Published: 2025-07-08T16:42:32.665Z Last Updated: 2025-11-04T21:08:38.170Z Severity: LOW (CVSS 3.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N) Vendors: AMD Products: AMD EPYC™ 7002 Series Processors, AMD EPYC™ 7003 Series Processors, AMD EPYC™ 9004 Series Processors, AMD EPYC™ 8004 Series Processors, AMD EPYC™ 4004 Series Processors, AMD EPYC™ 9V64H Processor, AMD Ryzen™ 5000 Series Desktop Processors, AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics, AMD Ryzen™ 3000 Series Desktop Processors, AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics, AMD Ryzen™ 7000 Series Desktop Processors, AMD Ryzen™ 4000 Series Desktop Proce
esktop Processors with Radeon™ Graphics, AMD Ryzen™ 7000 Series Desktop Processors, AMD Ryzen™ 4000 Series Desktop Processor with Radeon™ Graphics, AMD Ryzen™ 8000 Series Processor with Radeon™ Graphics, AMD Ryzen™ Threadripper™ 3000 Series Processors, AMD Ryzen™ Threadripper™ PRO 7000 WX-Series Processors, AMD Ryzen™ Threadripper™ PRO 3000WX Series Processors, AMD Ryzen™ Threadripper™ PRO 5000WX- Series Desktop Processors, AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics, AMD Ryzen™ 6000 Series Processor with Radeon™ Graphics, AMD Ryzen™ 7035 Series Processor with Radeon™ Graphics, AMD Ryzen™ 7000 Series Processors with Radeon™ Graphics, AMD Ryzen™ 7040 Series Processors with Radeon™
adeon™ Graphics, AMD Ryzen™ 7000 Series Processors with Radeon™ Graphics, AMD Ryzen™ 7040 Series Processors with Radeon™ Graphics, AMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics, AMD Ryzen™ 7000 Series Mobile Processors, AMD EPYC™ Embedded 7002 Series Processors, AMD EPYC™ Embedded 7003 Series Processors, AMD EPYC™ Embedded 8004 Series Processors, AMD EPYC™ Embedded 9004 Series Processors, AMD Ryzen™ Embedded 5000 Series Processors, AMD Ryzen™ Embedded 7000 Series Processors, AMD Ryzen™ Embedded V2000 Series Processors, AMD Ryzen™ Embedded V3000 Series Processors Problem Types: CWE-1420 Description: A transient execution vulnerability in some AMD processors may allow a user p
ssors Problem Types: CWE-1420 Description: A transient execution vulnerability in some AMD processors may allow a user process to infer the control registers speculatively even if UMIP feature is enabled, potentially resulting in information leakage. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7029.html