CVE-2021-4093

A flaw was found in the KVM's AMD code for supporting the Secure Encrypted Virtualization-Encrypted State SEV-ES. A KVM guest using SEV-ES can trigger out-of-bounds reads and writes in the host kernel via a malicious VMGEXIT for a string I/O instruction for example, outs or ins using the exit...

UBUNTU-CVE-2021-4093

A flaw was found in the KVM's AMD code for supporting the Secure Encrypted Virtualization-Encrypted State SEV-ES. A KVM guest using SEV-ES can trigger out-of-bounds reads and writes in the host kernel via a malicious VMGEXIT for a string I/O instruction for example, outs or ins using the exit...

CVE-2020-12890

Improper handling of pointers in the System Management Mode SMM handling code may allow for a privileged attacker with physical or administrative access to potentially manipulate the AMD Generic Encapsulated Software Architecture AGESA to execute arbitrary code undetected by the operating system...

CVE-2020-12890

Summary (based on provided docs): CVE-2020-12890 concerns AMD’s System Management Mode (SMM). The root cause is a lack of validation in the SMI handler when calling SmmGetVariable, allowing an attacker with physical or administrative access to manipulate the AGESA code in UEFI firmware and gain a...

CVE-2021-4093

A flaw was found in the KVM's AMD code for supporting the Secure Encrypted Virtualization-Encrypted State SEV-ES. A KVM guest using SEV-ES can trigger out-of-bounds reads and writes in the host kernel via a malicious VMGEXIT for a string I/O instruction for example, outs or ins using the exit...

AMD Graphics Driver has an unspecified vulnerability (CNVD-2021-100385)

AMD Graphics Driver, an integrated graphics driver from AMD, is a security vulnerability that can be exploited by attackers to cause a Windows BugCheck or to write leaked information...

Unspecified Vulnerability in AMD Graphics Driver (CNVD-2021-100383)

AMD Graphics Driver is an integrated graphics driver from AMD. A security vulnerability exists in AMD Graphics Driver, which can be exploited by attackers to cause privilege escalation, denial of service, information disclosure, KASLR bypass, or arbitrary write to kernel memory...

HP ProLiant Command Injection Vulnerability

HP ProLiant is the intelligent computing foundation for HP America's hybrid cloud, providing unparalleled workload optimization, security and automation, all available as a service. HP ProLiant has a command injection vulnerability that can be exploited by an attacker who can exploit multiple...

AMD Graphics Driver has an unspecified vulnerability (CNVD-2021-100384)

AMD Graphics Driver is an integrated graphics driver from AMD, a U.S. company. AMD Graphics Driver contains a security vulnerability that can be exploited by attackers to cause an elevation of privilege or denial of service...

AMD Graphics Driver Resource Management Error Vulnerability

AMD Graphics Driver is an integrated graphics driver from AMD, Inc. AMD Graphics Driver is vulnerable to a resource management error that could be exploited by attackers to cause a KASLR bypass or information disclosure...

Unspecified Vulnerability in AMD Graphics Driver (CNVD-2021-100382)

AMD Graphics Driver is an integrated graphics driver from AMD. AMD Graphics Driver contains a security vulnerability that can be exploited by attackers to compromise a system by an unprivileged user...

Security Bulletin: This Power System update is being released to address CVE-2018-8931

Summary POWER8/POWER9: In response to a security bypass vulnerability, a new Power System firmware update is being released to address Common Vulnerabilities and Exposures issue number CVE-2018-8931. Vulnerability Details CVEID: CVE-2018-8931 DESCRIPTION: The AMD Ryzen, Ryzen Pro, and Ryzen Mobil...

CVE-2021-26334

The AMDPowerProfiler.sys driver of AMD μProf tool may allow lower privileged users to access MSRs in kernel which may lead to privilege escalation and ring-0 code execution by the lower privileged user...

Privilege escalation

The AMDPowerProfiler.sys driver of AMD ?Prof tool may allow lower privileged users to access MSRs in kernel which may lead to privilege escalation and ring-0 code execution by the lower privileged user...

CVE-2021-26334

CVE-2021-26334 affects AMD μProf Tool via the AMDPowerProfiler.sys driver. The root cause is improper access control that could let a low-privilege user access MSRs in the kernel, enabling privilege escalation and potential ring-0 code execution. Affected product: AMD μProf (AMDuProf). Exploitati...

CVE-2021-26334 AMD Chipset Driver Information Disclosure Vulnerability

The AMDPowerProfiler.sys driver of AMD μProf tool may allow lower privileged users to access MSRs in kernel which may lead to privilege escalation and ring-0 code execution by the lower privileged user...

Ubuntu 20.04 LTS : Linux kernel (OEM) vulnerabilities (USN-5165-1)

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5165-1 advisory. It was discovered that the NFC subsystem in the Linux kernel contained a use-after-free vulnerability in its NFC Controller Interface NCI implementation....

AMD Graphics Driver for Windows 10 Buffer Overflow Vulnerability (CNVD-2021-95626)

AMD Graphics Driver is an integrated graphics driver from AMD. AMD Graphics Driver for Windows 10 suffers from a buffer overflow vulnerability that can be exploited by attackers to cause arbitrary information disclosure...

Ubuntu: Security Advisory (USN-5165-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

AMD Graphics Driver for Windows 10 Information Disclosure Vulnerability

AMD Graphics Driver is an integrated graphics driver from AMD. AMD Graphics Driver for Windows 10 suffers from an information disclosure vulnerability that can be exploited by attackers to cause a KASLR bypass...