CVE-2018-8932

CRITICAL Year: 2018
CVSS v3 Score
9.0
Critical
CVSS v2 Score
9.3
Critical
Weakness Type
CWE-732
View all →

Vulnerability Description

The AMD Ryzen and Ryzen Pro processor chips have insufficient access control for the Secure Processor, aka RYZENFALL-2, RYZENFALL-3, and RYZENFALL-4.

Related Vulnerabilities

CVE-2017-7471

CRITICAL
CVSS:9.0(Critical)

Quick Emulator (Qemu) built with the VirtFS, host directory sharing via Plan 9 File System (9pfs) support, is vulnerable to an improper access control issue. It could occur while accessing files on a ...

CWE-7322017

CVE-2018-8931

CRITICAL
CVSS:9.0(Critical)

The AMD Ryzen, Ryzen Pro, and Ryzen Mobile processor chips have insufficient access control for the Secure Processor, aka RYZENFALL-1.

CWE-7322018

CVE-2018-8933

CRITICAL
CVSS:9.0(Critical)

The AMD EPYC Server processor chips have insufficient access control for protected memory regions, aka FALLOUT-1, FALLOUT-2, and FALLOUT-3.

CWE-7322018

CVE-2019-12373

CRITICAL
CVSS:9.0(Critical)

Improper access control and open directories in Ivanti LANDESK Management Suite (LDMS, aka Endpoint Manager) 10.0.1.168 Service Update 5 may lead to remote disclosure of administrator passwords.

CWE-7322019

CVE-2016-5202

CRITICAL
CVSS:9.1(Critical)

browser/extensions/api/dial/dial_registry.cc in Google Chrome before 54.0.2840.98 on macOS, before 54.0.2840.99 on Windows, and before 54.0.2840.100 on Linux neglects to copy a device ID before an era...

CWE-7322016

CVE-2017-7337

CRITICAL
CVSS:9.1(Critical)

An improper Access Control vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows an attacker to interact with unauthorized VDOMs or enumerate other ADOMs via another user's stolen sess...

CWE-7322017