CVE-2026-0004

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-0004", "assignerOrgId": "b58fc414-a1e4-4f92-9d70-1add41838648", "state": "PUBLISHED", "assignerShortName": "AMD", "dateReserved": "2025-10-09T19:57:44.246Z", "datePublished": "2026-11-12T19:09:29.272Z", "dateUpdated": "2026-11-13T00:17:31.743Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "b58fc414-a1e4-4f92-9d70-1add41838648", "shortName": "AMD", "dateUpdated": "2026-11-12T19:09:29.272Z"}, "affected": [{"defaultStatus": "affected", "vendor": "AMD", "product": "AMD EPYC\u2122 9005 Series Processors", "versions": [{"version": "TurinPI_1.0.0.B", "status": "unaffected"}]}, {"defaultStatus": "affected", "vendor": "AMD", "product": "AMD EPYC\u2122 8005 Series Processors", "versions": [{"version": "TurinPI_1.0.0.B", "status": "unaffected"}]}, {"defaultStatus": "affected", "vendor": "AMD", "product": "AMD Ryzen\u2122 9000HX Series Processors", "versions": [{"version": "FireRangeFL1 PI-1.0.0.0i", "status": "unaffected"}]}, {"defaultStatus": "affected", "vendor": "AMD", "product": "AMD Ryzen\u2122 AI 300 Series Processors", "versions": [{"version": "StrixKrackanPI-FP8_1.1.0.0h", "status": "unaffected"}, {"version": "StrixKrackanPI-FP8_1.1.0.2g", "status": "unaffected"}]}, {"defaultStatus": "affected", "vendor": "AMD", "product": "AMD Ryzen\u2122 9000 Series Desktop Processors", "versions": [{"version": "ComboAM5PI_1.2.0.3l", "status": "unaffected"}, {"version": "ComboAM5PI_1.3.0.1d", "status": "unaffected"}]}, {"defaultStatus": "affected", "vendor": "AMD", "product": "AMD Ryzen\u2122 AI Max 400 Series Processors", "versions": [{"version": "GorgonHalo PI FP11_1.0.0.0b", "status": "unaffected"}]}, {"defaultStatus": "affected", "vendor": "AMD", "product": "AMD Ryzen\u2122 AI Max 300 Series Processors", "versions": [{"version": "StrixHalo PI-FP11_1.0.0.2d", "status": "unaffected"}]}, {"defaultStatus": "affected", "vendor": "AMD", "product": "AMD Ryzen\u2122 AI 400 Series Desktop Processors", "versions": [{"version": "ComboAM5PI_1.3.0.1d", "status": "unaffected"}]}, {"defaultStatus": "affected", "vendor": "AMD", "product": "AMD Ryzen\u2122 Z1 Series Processors", "versions": [{"version": "StrixKrackanPI-FP8_1.1.0.0h", "status": "unaffected"}]}, {"defaultStatus": "affected", "vendor": "AMD", "product": "AMD Ryzen\u2122 Z2 Series Processors Extreme", "versions": [{"version": "StrixKrackanPI-FP8_1.1.0.0h", "status": "unaffected"}]}, {"defaultStatus": "affected", "vendor": "AMD", "product": "AMD Ryzen\u2122 Threadripper\u2122 PRO 7000 WX-Series Processors", "versions": [{"version": "ShimadaPeakPI-SP6-1.0.0.1h", "status": "unaffected"}]}, {"defaultStatus": "affected", "vendor": "AMD", "product": "AMD Ryzen\u2122 Threadripper\u2122 7000 Processors", "versions": [{"version": "ShimadaPeakPI-SP6-1.0.0.1h", "status": "unaffected"}]}, {"defaultStatus": "affected", "vendor": "AMD", "product": "AMD Ryzen\u2122 AI 400 Series Processors", "versions": [{"version": "GorgonPI-FP8_1.0.0.2e", "status": "unaffected"}]}, {"defaultStatus": "affected", "vendor": "AMD", "product": "AMD Ryzen\u2122 Threadripper\u2122 9000 Processors", "versions": [{"version": "ShimadaPeakPI-SP6-1.0.0.1h", "status": "unaffected"}]}, {"defaultStatus": "affected", "vendor": "AMD", "product": "AMD Ryzen\u2122 Threadripper\u2122 PRO 9000 WX-Series Processors", "versions": [{"version": "ShimadaPeakPI-SP6-1.0.0.1h", "status": "unaffected"}]}, {"defaultStatus": "affected", "vendor": "AMD", "product": "AMD EPYC\u2122 Embedded 9005 Series Processors", "versions": [{"version": "EmbeddedTurinPI_SP5_1005", "status": "unaffected"}]}, {"defaultStatus": "affected", "vendor": "AMD", "product": "AMD Ryzen\u2122 Embedded 9000 Series Processors", "versions": [{"version": "EmbeddedAM5PI_1.0.0.9", "status": "unaffected"}]}, {"defaultStatus": "affected", "vendor": "AMD", "product": "AMD EPYC\u2122 Embedded 2005 Series Processors", "versions": [{"version": "EmbeddedFireRangeFL1_1.0.0.5", "status": "unaffected"}]}, {"defaultStatus": "affected", "vendor": "AMD", "product": "AMD Ryzen\u2122 Embedded P100 Series Processors", "versions": [{"version": "EmbeddedP100 PI 1000", "status": "unaffected"}]}], "datePublic": "2026-11-12T19:09:10.394Z", "descriptions": [{"lang": "en", "value": "A transient execution vulnerability in some AMD processors may allow an attacker with the ability to execute code on the system to infer data in the L1D cache, potentially resulting in the leakage of sensitive information across privileged boundaries.", "supportingMedia": [{"base64": false, "type": "text/html", "value": "A transient execution vulnerability in some AMD processors may allow an attacker with the ability to execute code on the system to infer data in the L1D cache, potentially resulting in the leakage of sensitive information across privileged boundaries.<br>"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-1421", "description": "CWE-1421 Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution", "lang": "en", "type": "CWE"}]}], "references": [{"url": "https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-4018.html"}, {"url": "https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-3055.html"}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "AMD PSIRT Automation 1.0"}, "metrics": [{"cvssV4_0": {"version": "4.0", "vectorString": "CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N", "attackVector": "LOCAL", "attackComplexity": "HIGH", "attackRequirements": "NONE", "privilegesRequired": "LOW", "userInteraction": "NONE", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "subAvailabilityImpact": "NONE", "baseScore": 5.7, "baseSeverity": "MEDIUM"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-11-13T00:17:18.862645Z", "id": "CVE-2026-0004", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-11-13T00:17:31.743Z"}}]}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "affected", "product": "AMD EPYC\u2122 9005 Series Processors", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "TurinPI_1.0.0.B"}]}, {"defaultStatus": "affected", "product": "AMD EPYC\u2122 8005 Series Processors", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "TurinPI_1.0.0.B"}]}, {"defaultStatus": "affected", "product": "AMD Ryzen\u2122 9000HX Series Processors", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "FireRangeFL1 PI-1.0.0.0i"}]}, {"defaultStatus": "affected", "product": "AMD Ryzen\u2122 AI 300 Series Processors", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "StrixKrackanPI-FP8_1.1.0.0h"}, {"status": "unaffected", "version": "StrixKrackanPI-FP8_1.1.0.2g"}]}, {"defaultStatus": "affected", "product": "AMD Ryzen\u2122 9000 Series Desktop Processors", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "ComboAM5PI_1.2.0.3l"}, {"status": "unaffected", "version": "ComboAM5PI_1.3.0.1d"}]}, {"defaultStatus": "affected", "product": "AMD Ryzen\u2122 AI Max 400 Series Processors", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "GorgonHalo PI FP11_1.0.0.0b"}]}, {"defaultStatus": "affected", "product": "AMD Ryzen\u2122 AI Max 300 Series Processors", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "StrixHalo PI-FP11_1.0.0.2d"}]}, {"defaultStatus": "affected", "product": "AMD Ryzen\u2122 AI 400 Series Desktop Processors", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "ComboAM5PI_1.3.0.1d"}]}, {"defaultStatus": "affected", "product": "AMD Ryzen\u2122 Z1 Series Processors", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "StrixKrackanPI-FP8_1.1.0.0h"}]}, {"defaultStatus": "affected", "product": "AMD Ryzen\u2122 Z2 Series Processors Extreme", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "StrixKrackanPI-FP8_1.1.0.0h"}]}, {"defaultStatus": "affected", "product": "AMD Ryzen\u2122 Threadripper\u2122 PRO 7000 WX-Series Processors", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "ShimadaPeakPI-SP6-1.0.0.1h"}]}, {"defaultStatus": "affected", "product": "AMD Ryzen\u2122 Threadripper\u2122 7000 Processors", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "ShimadaPeakPI-SP6-1.0.0.1h"}]}, {"defaultStatus": "affected", "product": "AMD Ryzen\u2122 AI 400 Series Processors", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "GorgonPI-FP8_1.0.0.2e"}]}, {"defaultStatus": "affected", "product": "AMD Ryzen\u2122 Threadripper\u2122 9000 Processors", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "ShimadaPeakPI-SP6-1.0.0.1h"}]}, {"defaultStatus": "affected", "product": "AMD Ryzen\u2122 Threadripper\u2122 PRO 9000 WX-Series Processors", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "ShimadaPeakPI-SP6-1.0.0.1h"}]}, {"defaultStatus": "affected", "product": "AMD EPYC\u2122 Embedded 9005 Series Processors", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "EmbeddedTurinPI_SP5_1005"}]}, {"defaultStatus": "affected", "product": "AMD Ryzen\u2122 Embedded 9000 Series Processors", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "EmbeddedAM5PI_1.0.0.9"}]}, {"defaultStatus": "affected", "product": "AMD EPYC\u2122 Embedded 2005 Series Processors", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "EmbeddedFireRangeFL1_1.0.0.5"}]}, {"defaultStatus": "affected", "product": "AMD Ryzen\u2122 Embedded P100 Series Processors", "vendor": "AMD", "versions": [{"status": "unaffected", "version": "EmbeddedP100 PI 1000"}]}], "source": "psirt@amd.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A transient execution vulnerability in some AMD processors may allow an attacker with the ability to execute code on the system to infer data in the L1D cache, potentially resulting in the leakage of sensitive information across privileged boundaries."}], "id": "CVE-2026-0004", "lastModified": "2026-11-13T02:18:48.653", "metrics": {"cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "HIGH", "attackRequirements": "NONE", "attackVector": "LOCAL", "availabilityRequirement": "NOT_DEFINED", "baseScore": 5.7, "baseSeverity": "MEDIUM", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "LOW", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "NONE", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "psirt@amd.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-0004", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-11-13T00:17:18.862645Z", "version": "2.0.3"}}]}, "published": "2026-11-12T19:16:45.160", "references": [{"source": "psirt@amd.com", "url": "https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-3055.html"}, {"source": "psirt@amd.com", "url": "https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-4018.html"}], "sourceIdentifier": "psirt@amd.com", "vulnStatus": "Awaiting Analysis"}

{}

{"created": "2026-11-13T00:00:10.930883+00:00", "title": "Transient Execution Vulnerability Leading to Cache\u2011Based Data Leakage", "updated": "2026-11-13T00:00:10.930893+00:00", "vendors": []}