# Amd vulnerabilities Source: https://junglewise.ai/threats/vendors/amd Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 13 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/vendors/amd.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 117 vulnerabilities in Amd: 39 in the last 7 days and 51 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-0460, was published on 12 November 2026. 5 vulnerabilities in the last four weeks, up 67% on the four before (3). 11 technologies have a page of their own. ## Counts - Last 7 days: 39 - Last 30 days: 44 - Last 90 days: 51 - All time: 117 (0 critical, 0 exploited in the wild) ## About Amd Advanced Micro Devices, Inc. is an American fabless semiconductor company that develops computer processors and related technologies. ## Latest Amd vulnerabilities - [CVE-2026-0460: AMD Bootgen improper authentication in RSA padding](https://junglewise.ai/threats/cve-2026-0460-improper-authentication-in-bootgen-could-result-in-the-use-of-a) (info, published 12 Nov 2026) - [CVE-2026-0455: AMD Versal AI Edge Series Gen 2 Peripheral Protection Unit access control bypass](https://junglewise.ai/threats/cve-2026-0455-the-versal-ai-edge-series-gen-2-peripheral-protection-unit-xppu) (info, published 12 Nov 2026) - [CVE-2025-54507: AMD SEV firmware improper RMP entry validation](https://junglewise.ai/threats/cve-2025-54507-improper-validation-of-consistency-within-input-in-amd-sev-secure) (info, published 12 Nov 2026) - [CVE-2025-0043: AMD Vivado Lab Solutions privilege escalation via directory permissions](https://junglewise.ai/threats/cve-2025-0043-incorrect-directory-permissions-within-amd-vivado-lab-solutions) (info, published 12 Nov 2026) - [CVE-2024-36344: AMD Secure Processor TEE DrvSys out-of-bounds write](https://junglewise.ai/threats/cve-2024-36344-insufficient-parameter-sanitization-in-amd-secure-processor-asp) (info, published 12 Nov 2026) - [CVE-2024-21963: AMD IOMMU out-of-bounds read in hypervisor](https://junglewise.ai/threats/cve-2024-21963-an-out-of-bounds-read-vulnerability-in-the-iommu-could-allow-a) (info, published 12 Nov 2026) - [CVE-2026-0436: AMD Secure Processor SPDM driver parameter sanitization](https://junglewise.ai/threats/cve-2026-0436-insufficient-parameter-sanitization-in-the-amd-secure-processor) (info, published 12 Nov 2026) - [CVE-2026-0101: AMD Power Management Firmware input validation flaw](https://junglewise.ai/threats/cve-2026-0101-improper-validation-of-specified-quantities-in-input-within-amd) (info, published 12 Nov 2026) - [CVE-2026-0004: AMD processors transient execution L1D cache inference](https://junglewise.ai/threats/cve-2026-0004-a-transient-execution-vulnerability-in-some-amd-processors-may) (info, published 12 Nov 2026) - [CVE-2025-54501: AMD EPYC improper access control in debug interface](https://junglewise.ai/threats/cve-2025-54501-improper-access-control-on-an-internal-debug-interface-could) (info, published 12 Nov 2026) - [CVE-2024-21954: AMD IOMMU improper exception handling in ATC invalidation](https://junglewise.ai/threats/cve-2024-21954-improper-exception-handling-in-iommu-could-allow-an-invalidate) (info, published 12 Nov 2026) - [CVE-2026-48479: AMD Graphics Driver uninitialized state out-of-bounds write](https://junglewise.ai/threats/cve-2026-48479-use-of-uninitialized-or-invalid-state-in-amd-graphics-driver) (info, published 11 Nov 2026) - [CVE-2026-0470: AMD Embedded SPI Flash driver null pointer dereference](https://junglewise.ai/threats/cve-2026-0470-null-pointer-dereference-in-amd-embedded-spi-flash-driver-could) (info, published 11 Nov 2026) - [CVE-2026-0480: AMD Secure Encrypted Virtualization firmware missing authentication](https://junglewise.ai/threats/cve-2026-0480-missing-authentication-for-critical-function-in-amd-secure) (info, published 10 Nov 2026) - [CVE-2026-0454: AMD Secure Encrypted Virtualization firmware out-of-bounds write](https://junglewise.ai/threats/cve-2026-0454-an-out-of-bounds-write-in-the-amd-secure-encrypted-virtualization) (info, published 10 Nov 2026) - [CVE-2026-0435: AMD Secure Encrypted Virtualization firmware use-after-free](https://junglewise.ai/threats/cve-2026-0435-operation-on-a-resource-after-expiration-or-release-in-the-amd) (info, published 10 Nov 2026) - [CVE-2026-0003: AMD SEV firmware downgrade in ASP Bootloader](https://junglewise.ai/threats/cve-2026-0003-use-of-a-per-part-static-key-in-the-asp-bootloader-could-allow-an) (info, published 10 Nov 2026) - [CVE-2025-48504: AMD Secure Encrypted Virtualization use-after-free in firmware](https://junglewise.ai/threats/cve-2025-48504-operation-on-a-resource-after-expiration-or-release-in-the-secure) (info, published 10 Nov 2026) - [CVE-2025-29941: AMD SEV firmware pseudo-random number generator seed misuse](https://junglewise.ai/threats/cve-2025-29941-incorrect-usage-of-seeds-in-pseudo-random-number-generator-in-the) (info, published 10 Nov 2026) - [CVE-2025-0008: AMD processor Secure Debug Unlock authentication bypass](https://junglewise.ai/threats/cve-2025-0008-insufficient-verification-of-data-authenticity-may-allow-a-local) (info, published 10 Nov 2026) - [CVE-2024-36309: AMD Northbridge IO missing lock bit protection in remapping](https://junglewise.ai/threats/cve-2024-36309-missing-lock-bit-protection-in-the-northbridge-io-nbio-could) (info, published 10 Nov 2026) - [CVE-2026-40670: AMD Secure Encrypted Virtualization SEV-SNP MMIO region overlap](https://junglewise.ai/threats/cve-2026-40670-improper-check-for-unusual-or-exceptional-conditions-in-amd) (info, published 10 Nov 2026) - [CVE-2026-40669: AMD Secure Encrypted Virtualization off-by-one error in firmware](https://junglewise.ai/threats/cve-2026-40669-an-off-by-one-error-in-amd-secure-encrypted-virtualization-sev) (info, published 10 Nov 2026) - [CVE-2026-40668: AMD Secure Encrypted Virtualization firmware authentication bypass](https://junglewise.ai/threats/cve-2026-40668-authentication-bypass-by-spoofing-in-amd-secure-encrypted) (info, published 10 Nov 2026) - [CVE-2026-28249: AMD Secure Encrypted Virtualization cache coherency integrity issue](https://junglewise.ai/threats/cve-2026-28249-improper-preservation-of-consistency-between-independent) (info, published 10 Nov 2026) ## Most severe Amd vulnerabilities - [CVE-2026-49121: AMD AITER remote code execution in MessageQueue.recv](https://junglewise.ai/threats/cve-2026-49121-amd-aiter-remote-code-execution-in-messagequeue-recv) (high, CVSS 8.1, published 1 Jun 2026) - [CVE-2024-36333: AMD Cleanup Utility DLL hijacking privilege escalation](https://junglewise.ai/threats/cve-2024-36333-amd-cleanup-utility-dll-hijacking-privilege-escalation) (high, CVSS 7.8, published 15 May 2026) - [CVE-2023-20576: AMD AGESA insufficient verification of data authenticity in SPI ROM](https://junglewise.ai/threats/cve-2023-20576-amd-agesa-insufficient-verification-of-data-authenticity-in-spi) (high, CVSS 7.7, published 2 Sep 2026) - [CVE-2025-54502: AMD APCB SMM driver privilege escalation in multiple processors](https://junglewise.ai/threats/cve-2025-54502-amd-apcb-smm-driver-privilege-escalation-in-multiple-processors) (high, CVSS 7.5, published 16 Apr 2026) - [CVE-2023-20577: AMD firmware heap overflow in SMM module](https://junglewise.ai/threats/cve-2023-20577-amd-firmware-heap-overflow-in-smm-module) (high, CVSS 7.4, published 2 Sep 2026) - [CVE-2025-54518: AMD Zen 2 Processors privilege escalation via CPU Opcode Cache corruption](https://junglewise.ai/threats/cve-2025-54518-amd-zen-2-processors-privilege-escalation-via-cpu-opcode-cache) (high, CVSS 7, published 15 May 2026) - [CVE-2024-36350: AMD EPYC 5th generation processor data cache information leak](https://junglewise.ai/threats/cve-2024-36350-gcp-2026-081) (high, published 10 Nov 2026) - [CVE-2023-20511: AMD kernel mode driver double free in pointer release](https://junglewise.ai/threats/cve-2023-20511-amd-kernel-mode-driver-double-free-in-pointer-release) (medium, CVSS 6.4, published 31 Aug 2026) - [CVE-2026-84004: AMD Zen processor optimization removal of security-critical code](https://junglewise.ai/threats/cve-2026-84004-processor-optimization-removal-or-modification-of-security) (medium, CVSS 5.5, published 10 Nov 2026) - [CVE-2024-21944: AMD BIOS improper input validation in DIMM SPD metadata](https://junglewise.ai/threats/cve-2024-21944-amd-bios-improper-input-validation-in-dimm-spd-metadata) (medium, CVSS 5.3, published 10 Jun 2026) ## Vulnerabilities per week 5 vulnerabilities in the last four weeks, up 67% on the four before (3). | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 4 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 3 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 5 | 0 | 0 | | 9 Nov 2026 | 39 | 0 | 0 | ## Amd technologies - [Amd Secure Encrypted Virtualization firmware](https://junglewise.ai/threats/technologies/secure-encrypted-virtualization-firmware): 8 vulnerabilities - [Amd Platform Management Framework](https://junglewise.ai/threats/technologies/platform-management-framework): 6 vulnerabilities - [Amd Secure Encrypted Virtualization (SEV) firmware](https://junglewise.ai/threats/technologies/secure-encrypted-virtualization-sev-firmware): 6 vulnerabilities - [Amd Compressonator SDK](https://junglewise.ai/threats/technologies/compressonator-sdk): 5 vulnerabilities - [Amd Processors](https://junglewise.ai/threats/technologies/processors): 5 vulnerabilities - [Amd Secure Processor](https://junglewise.ai/threats/technologies/secure-processor): 5 vulnerabilities - [Amd SEV firmware](https://junglewise.ai/threats/technologies/sev-firmware): 4 vulnerabilities - [Amd Ionic Cloud Driver for VMware ESXi](https://junglewise.ai/threats/technologies/ionic-cloud-driver-for-vmware-esxi): 3 vulnerabilities - [Amd Platform Management Framework Driver](https://junglewise.ai/threats/technologies/platform-management-framework-driver): 3 vulnerabilities - [Amd Power Management Firmware](https://junglewise.ai/threats/technologies/power-management-firmware): 3 vulnerabilities - [Amd Vitis Unified](https://junglewise.ai/threats/technologies/vitis-unified): 3 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Amd vulnerabilities", https://junglewise.ai/threats/vendors/amd, 13 November 2026.