Beveiligingsadvies

CVE-2026-0438

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-05-15 01:41:25
Laatst bijgewerkt 2026-05-19 21:01:36
Toegewezen door AMD
CVSS-score 5.4
Status PUBLISHED

Beschrijving

A System Management Mode (SMM) handler could perform a callout to code located in non-SMM/untrusted memory. A highly privileged attacker could, with active user interaction and under high complexity and present preconditions, trigger execution of attacker-controlled code in SMM, potentially compromising the system’s confidentiality, integrity, and availability.