{"schema_version":1,"title":"Amd vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 70 vulnerabilities in Amd: 0 in the last 7 days and 11 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2023-20577, was published on 2 September 2026. 6 technologies have a page of their own.","url":"https://junglewise.ai/threats/vendors/amd","json_url":"https://junglewise.ai/threats/vendors/amd.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/vendors/amd","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"vendor","counts":{"high":6,"all_time":70,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":4,"last_90_days":11,"last_365_days":70},"latest":[{"cve":"CVE-2023-20577","cvss":7.4,"epss":0.0016,"slug":"cve-2023-20577-amd-firmware-heap-overflow-in-smm-module","title":"AMD firmware heap overflow in SMM module","severity":"high","exploited":false,"published_at":"2026-09-02T20:17:34.093+00:00","url":"https://junglewise.ai/threats/cve-2023-20577-amd-firmware-heap-overflow-in-smm-module"},{"cve":"CVE-2023-20576","cvss":7.7,"epss":0.0013,"slug":"cve-2023-20576-amd-agesa-insufficient-verification-of-data-authenticity-in-spi","title":"AMD AGESA insufficient verification of data authenticity in SPI ROM","severity":"high","exploited":false,"published_at":"2026-09-02T20:17:32.95+00:00","url":"https://junglewise.ai/threats/cve-2023-20576-amd-agesa-insufficient-verification-of-data-authenticity-in-spi"},{"cve":"CVE-2023-31308","cvss":3.3,"epss":0.001,"slug":"cve-2023-31308-amd-system-management-unit-out-of-bounds-memory-read-in-command","title":"AMD System Management Unit out-of-bounds memory read in command handlers","severity":"low","exploited":false,"published_at":"2026-08-31T19:16:44.89+00:00","url":"https://junglewise.ai/threats/cve-2023-31308-amd-system-management-unit-out-of-bounds-memory-read-in-command"},{"cve":"CVE-2023-20511","cvss":6.4,"epss":0.0023,"slug":"cve-2023-20511-amd-kernel-mode-driver-double-free-in-pointer-release","title":"AMD kernel mode driver double free in pointer release","severity":"medium","exploited":false,"published_at":"2026-08-31T19:16:44.38+00:00","url":"https://junglewise.ai/threats/cve-2023-20511-amd-kernel-mode-driver-double-free-in-pointer-release"},{"cve":"CVE-2026-0465","epss":0.0015,"slug":"cve-2026-0465-amd-ryzen-master-utility-driver-use-after-free-in-kernel-memory","title":"AMD Ryzen Master Utility Driver use-after-free in kernel memory access","severity":"info","exploited":false,"published_at":"2026-08-11T18:17:17.71+00:00","url":"https://junglewise.ai/threats/cve-2026-0465-amd-ryzen-master-utility-driver-use-after-free-in-kernel-memory"},{"cve":"CVE-2025-54512","epss":0.0016,"slug":"cve-2025-54512-amd-ryzen-master-dll-hijacking-privilege-escalation","title":"AMD Ryzen Master DLL hijacking privilege escalation","severity":"info","exploited":false,"published_at":"2026-08-11T18:17:17.557+00:00","url":"https://junglewise.ai/threats/cve-2025-54512-amd-ryzen-master-dll-hijacking-privilege-escalation"},{"cve":"CVE-2025-8087","epss":0.0016,"slug":"cve-2025-8087-amd-power-design-manager-dll-hijacking-in-uninstaller","title":"AMD Power Design Manager DLL hijacking in uninstaller","severity":"info","exploited":false,"published_at":"2026-08-11T17:17:44.463+00:00","url":"https://junglewise.ai/threats/cve-2025-8087-amd-power-design-manager-dll-hijacking-in-uninstaller"},{"cve":"CVE-2025-61970","epss":0.0014,"slug":"cve-2025-61970-amd-vitis-unified-weak-installation-permissions","title":"AMD Vitis Unified weak installation permissions","severity":"info","exploited":false,"published_at":"2026-08-11T17:17:44.33+00:00","url":"https://junglewise.ai/threats/cve-2025-61970-amd-vitis-unified-weak-installation-permissions"},{"cve":"CVE-2025-48506","epss":0.002,"slug":"cve-2025-48506-amd-vitis-unified-dll-injection-via-uncontrolled-search-path","title":"AMD Vitis Unified DLL injection via uncontrolled search path","severity":"info","exploited":false,"published_at":"2026-08-11T17:17:44.2+00:00","url":"https://junglewise.ai/threats/cve-2025-48506-amd-vitis-unified-dll-injection-via-uncontrolled-search-path"},{"cve":"CVE-2025-48505","epss":0.0015,"slug":"cve-2025-48505-amd-vitis-unified-weak-permissions-privilege-escalation","title":"AMD Vitis Unified weak permissions privilege escalation","severity":"info","exploited":false,"published_at":"2026-08-11T17:17:44.067+00:00","url":"https://junglewise.ai/threats/cve-2025-48505-amd-vitis-unified-weak-permissions-privilege-escalation"},{"cve":"CVE-2025-0041","epss":0.0018,"slug":"cve-2025-0041-amd-vitis-embedded-uncontrolled-search-path-privilege-escalation","title":"AMD Vitis Embedded uncontrolled search path privilege escalation","severity":"info","exploited":false,"published_at":"2026-08-11T17:17:42.14+00:00","url":"https://junglewise.ai/threats/cve-2025-0041-amd-vitis-embedded-uncontrolled-search-path-privilege-escalation"},{"cve":"CVE-2023-20572","cvss":5.6,"slug":"cve-2023-20572-amd-secure-processor-timing-discrepancy-in-hmac-verification","title":"AMD Secure Processor timing discrepancy in HMAC verification","severity":"info","exploited":false,"published_at":"2026-06-26T16:16:28.967+00:00","url":"https://junglewise.ai/threats/cve-2023-20572-amd-secure-processor-timing-discrepancy-in-hmac-verification"},{"cve":"CVE-2023-20540","cvss":1.8,"slug":"cve-2023-20540-amd-secure-processor-timing-discrepancy-in-hmac-validation","title":"AMD Secure Processor timing discrepancy in HMAC validation","severity":"info","exploited":false,"published_at":"2026-06-26T16:16:28.81+00:00","url":"https://junglewise.ai/threats/cve-2023-20540-amd-secure-processor-timing-discrepancy-in-hmac-validation"},{"cve":"CVE-2026-40677","cvss":7.7,"slug":"cve-2026-40677-amd-optional-tools-man-in-the-middle-vulnerability","title":"AMD Optional Tools man-in-the-middle vulnerability","severity":"info","exploited":false,"published_at":"2026-06-12T16:16:27.4+00:00","url":"https://junglewise.ai/threats/cve-2026-40677-amd-optional-tools-man-in-the-middle-vulnerability"},{"cve":"CVE-2024-21944","cvss":5.3,"slug":"cve-2024-21944-amd-bios-improper-input-validation-in-dimm-spd-metadata","title":"AMD BIOS improper input validation in DIMM SPD metadata","severity":"medium","exploited":false,"published_at":"2026-06-10T23:16:44.95+00:00","url":"https://junglewise.ai/threats/cve-2024-21944-amd-bios-improper-input-validation-in-dimm-spd-metadata"},{"cve":"CVE-2026-28237","cvss":6.8,"slug":"cve-2026-28237-amd-uprof-unrestricted-resource-allocation","title":"AMD uProf unrestricted resource allocation","severity":"info","exploited":false,"published_at":"2026-06-09T18:16:37.897+00:00","url":"https://junglewise.ai/threats/cve-2026-28237-amd-uprof-unrestricted-resource-allocation"},{"cve":"CVE-2026-0466","cvss":6.8,"slug":"cve-2026-0466-amd-uprof-improper-access-control-in-kernel-shared-memory","title":"AMD uProf improper access control in kernel-shared memory","severity":"info","exploited":false,"published_at":"2026-06-09T18:16:33.993+00:00","url":"https://junglewise.ai/threats/cve-2026-0466-amd-uprof-improper-access-control-in-kernel-shared-memory"},{"cve":"CVE-2025-54509","cvss":5.1,"slug":"cve-2025-54509-amd-iommu-improper-access-control-in-register-interface","title":"AMD IOMMU improper access control in register interface","severity":"info","exploited":false,"published_at":"2026-06-09T18:16:32.58+00:00","url":"https://junglewise.ai/threats/cve-2025-54509-amd-iommu-improper-access-control-in-register-interface"},{"cve":"CVE-2021-46747","cvss":7.1,"slug":"cve-2021-46747-amd-secure-processor-privilege-escalation-via-insufficient-smn","title":"AMD Secure Processor privilege escalation via insufficient SMN access control","severity":"info","exploited":false,"published_at":"2026-06-01T21:16:23.103+00:00","url":"https://junglewise.ai/threats/cve-2021-46747-amd-secure-processor-privilege-escalation-via-insufficient-smn"},{"cve":"CVE-2026-49121","cvss":8.1,"slug":"cve-2026-49121-amd-aiter-remote-code-execution-in-messagequeue-recv","title":"AMD AITER remote code execution in MessageQueue.recv","severity":"high","exploited":false,"published_at":"2026-06-01T19:16:54.18+00:00","url":"https://junglewise.ai/threats/cve-2026-49121-amd-aiter-remote-code-execution-in-messagequeue-recv"},{"cve":"CVE-2024-36343","cvss":6.7,"slug":"cve-2024-36343-amd-processor-out-of-bounds-read-write-in-smm-communications","title":"AMD Processor out of bounds read/write in SMM communications buffer","severity":"info","exploited":false,"published_at":"2026-05-19T22:16:35.42+00:00","url":"https://junglewise.ai/threats/cve-2024-36343-amd-processor-out-of-bounds-read-write-in-smm-communications"},{"cve":"CVE-2026-0481","cvss":9.2,"slug":"cve-2026-0481-amd-device-metrics-exporter-unrestricted-ip-address-binding","title":"AMD Device Metrics Exporter unrestricted IP address binding","severity":"info","exploited":false,"published_at":"2026-05-15T05:16:33.59+00:00","url":"https://junglewise.ai/threats/cve-2026-0481-amd-device-metrics-exporter-unrestricted-ip-address-binding"},{"cve":"CVE-2025-54518","cvss":7,"epss":0.0029,"slug":"cve-2025-54518-amd-zen-2-processors-privilege-escalation-via-cpu-opcode-cache","title":"AMD Zen 2 Processors privilege escalation via CPU Opcode Cache corruption","severity":"high","exploited":false,"published_at":"2026-05-15T05:16:33.013+00:00","url":"https://junglewise.ai/threats/cve-2025-54518-amd-zen-2-processors-privilege-escalation-via-cpu-opcode-cache"},{"cve":"CVE-2025-52532","cvss":2,"slug":"cve-2025-52532-amd-mxgpu-virtualization-driver-race-condition-in-ioctl-handler","title":"AMD MxGPU-Virtualization driver race condition in ioctl handler","severity":"info","exploited":false,"published_at":"2026-05-15T05:16:32.89+00:00","url":"https://junglewise.ai/threats/cve-2025-52532-amd-mxgpu-virtualization-driver-race-condition-in-ioctl-handler"},{"cve":"CVE-2024-36334","cvss":7,"slug":"cve-2024-36334-amd-radeon-rgb-tool-improper-signature-verification","title":"AMD Radeon RGB tool improper signature verification","severity":"info","exploited":false,"published_at":"2026-05-15T05:16:32.747+00:00","url":"https://junglewise.ai/threats/cve-2024-36334-amd-radeon-rgb-tool-improper-signature-verification"}],"vendor":{"hub":true,"name":"Amd","slug":"amd","homepage":"https://www.amd.com/","description":"Advanced Micro Devices, Inc. is an American fabless semiconductor company that develops computer processors and related technologies.","url":"https://junglewise.ai/threats/vendors/amd"},"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":7},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":4},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"most_severe":[{"cve":"CVE-2026-49121","cvss":8.1,"slug":"cve-2026-49121-amd-aiter-remote-code-execution-in-messagequeue-recv","title":"AMD AITER remote code execution in MessageQueue.recv","severity":"high","exploited":false,"published_at":"2026-06-01T19:16:54.18+00:00","url":"https://junglewise.ai/threats/cve-2026-49121-amd-aiter-remote-code-execution-in-messagequeue-recv"},{"cve":"CVE-2024-36333","cvss":7.8,"epss":0.0001,"slug":"cve-2024-36333-amd-cleanup-utility-dll-hijacking-privilege-escalation","title":"AMD Cleanup Utility DLL hijacking privilege escalation","severity":"high","exploited":false,"published_at":"2026-05-15T05:16:32.63+00:00","url":"https://junglewise.ai/threats/cve-2024-36333-amd-cleanup-utility-dll-hijacking-privilege-escalation"},{"cve":"CVE-2023-20576","cvss":7.7,"epss":0.0013,"slug":"cve-2023-20576-amd-agesa-insufficient-verification-of-data-authenticity-in-spi","title":"AMD AGESA insufficient verification of data authenticity in SPI ROM","severity":"high","exploited":false,"published_at":"2026-09-02T20:17:32.95+00:00","url":"https://junglewise.ai/threats/cve-2023-20576-amd-agesa-insufficient-verification-of-data-authenticity-in-spi"},{"cve":"CVE-2025-54502","cvss":7.5,"epss":0.0013,"slug":"cve-2025-54502-amd-apcb-smm-driver-privilege-escalation-in-multiple-processors","title":"AMD APCB SMM driver privilege escalation in multiple processors","severity":"high","exploited":false,"published_at":"2026-04-16T20:16:37.393+00:00","url":"https://junglewise.ai/threats/cve-2025-54502-amd-apcb-smm-driver-privilege-escalation-in-multiple-processors"},{"cve":"CVE-2023-20577","cvss":7.4,"epss":0.0016,"slug":"cve-2023-20577-amd-firmware-heap-overflow-in-smm-module","title":"AMD firmware heap overflow in SMM module","severity":"high","exploited":false,"published_at":"2026-09-02T20:17:34.093+00:00","url":"https://junglewise.ai/threats/cve-2023-20577-amd-firmware-heap-overflow-in-smm-module"},{"cve":"CVE-2025-54518","cvss":7,"epss":0.0029,"slug":"cve-2025-54518-amd-zen-2-processors-privilege-escalation-via-cpu-opcode-cache","title":"AMD Zen 2 Processors privilege escalation via CPU Opcode Cache corruption","severity":"high","exploited":false,"published_at":"2026-05-15T05:16:33.013+00:00","url":"https://junglewise.ai/threats/cve-2025-54518-amd-zen-2-processors-privilege-escalation-via-cpu-opcode-cache"},{"cve":"CVE-2023-20511","cvss":6.4,"epss":0.0023,"slug":"cve-2023-20511-amd-kernel-mode-driver-double-free-in-pointer-release","title":"AMD kernel mode driver double free in pointer release","severity":"medium","exploited":false,"published_at":"2026-08-31T19:16:44.38+00:00","url":"https://junglewise.ai/threats/cve-2023-20511-amd-kernel-mode-driver-double-free-in-pointer-release"},{"cve":"CVE-2024-21944","cvss":5.3,"slug":"cve-2024-21944-amd-bios-improper-input-validation-in-dimm-spd-metadata","title":"AMD BIOS improper input validation in DIMM SPD metadata","severity":"medium","exploited":false,"published_at":"2026-06-10T23:16:44.95+00:00","url":"https://junglewise.ai/threats/cve-2024-21944-amd-bios-improper-input-validation-in-dimm-spd-metadata"},{"cve":"CVE-2023-31308","cvss":3.3,"epss":0.001,"slug":"cve-2023-31308-amd-system-management-unit-out-of-bounds-memory-read-in-command","title":"AMD System Management Unit out-of-bounds memory read in command handlers","severity":"low","exploited":false,"published_at":"2026-08-31T19:16:44.89+00:00","url":"https://junglewise.ai/threats/cve-2023-31308-amd-system-management-unit-out-of-bounds-memory-read-in-command"},{"cve":"CVE-2026-0481","cvss":9.2,"slug":"cve-2026-0481-amd-device-metrics-exporter-unrestricted-ip-address-binding","title":"AMD Device Metrics Exporter unrestricted IP address binding","severity":"info","exploited":false,"published_at":"2026-05-15T05:16:33.59+00:00","url":"https://junglewise.ai/threats/cve-2026-0481-amd-device-metrics-exporter-unrestricted-ip-address-binding"}],"generated_at":"2026-09-26T09:11:00.170868+00:00","technologies":[{"name":"Amd Platform Management Framework","slug":"platform-management-framework","vulnerabilities":6,"url":"https://junglewise.ai/threats/technologies/platform-management-framework"},{"name":"Amd Secure Processor","slug":"secure-processor","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/secure-processor"},{"name":"Amd Ionic Cloud Driver for VMware ESXi","slug":"ionic-cloud-driver-for-vmware-esxi","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/ionic-cloud-driver-for-vmware-esxi"},{"name":"Amd Platform Management Framework Driver","slug":"platform-management-framework-driver","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/platform-management-framework-driver"},{"name":"Amd Processors","slug":"processors","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/processors"},{"name":"Amd Vitis Unified","slug":"vitis-unified","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/vitis-unified"}]}