Missing Lock Bit Protection in the Northbridge IO (NBIO) could allow a privileged attacker to use an intentionally disabled device as part of a remapping attack potentially impacting data confidentiality, integrity, or availability.
Search vulnerabilities
CVE-2024-36309
CVSS 4.0 · 4.6 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products
CVE-2024-21962
AMD RAID Driver Improper Input Validation Enables Privilege Escalation and Arbitrary Code Execution
Improper Input Validation in the AMD RAID driver could allow an attacker to point to an arbitrary memory location potentially resulting in privilege escalation and arbitrary code execution.
CVSS 4.0 · 8.6 High
EPSS < 1%
KEV · Not listed
Vendors
Products
CVE-2024-36315
Speculative Execution Bypass via Improper LFENCE Enforcement Leading to Potential Data Disclosure
Improper enforcement of the LFENCE serialization property may allow an attacker to bypass speculation barriers and potentially disclose sensitive information, potentially resulting in loss of confidentiality.
CVSS 4.0 · 5.7 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products
CVE-2025-54502
AMD Platform Configuration Blob: APCB SMM driver: kernel: linux-firmware: AMD APCB SMM driver: Arbitrary Code Execution via incorrect boot service use
Incorrect use of boot service in the AMD Platform Configuration Blob (APCB) SMM driver could allow a privileged attacker with local access (Ring 0) to achieve privilege escalation potentially resulting in arbitrary code execution.
CVSS 4.0 · 7.1 High
EPSS < 1%
KEV · Not listed
Vendors
Products
Page 1 of 1.