CVE-2025-0032
Improper cleanup in AMD CPU microcode patch loading could allow an attacker with local administrator privilege to load malicious CPU microcode, potentially resulting in loss of integrity of x86 instruction execution.
Scoring
- Severity
- HIGH
- CVSS base score
- 7.2
- CVSS vector
- CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N
- EPSS probability
- 0.15%
- CWE
- CWE-459
- Published
- 2025-09-06
- Last modified
- 2026-03-13
Affected products
- AMD AMD EPYC™ 9005 Series Processors
- AMD AMD Ryzen™ AI 300 Series Processors
- AMD AMD Ryzen™ 9000 Series Desktop Processors
- AMD AMD Ryzen™ 9000HX Series Processors
- AMD AMD Ryzen™ Al Max+
- AMD AMD Ryzen™ Threadripper™ 9000 series
- AMD AMD EPYC™ Embedded 9000 Series Processors
Weakness type
Related vulnerabilities
- CVE-2026-87549 — Incomplete cleanup in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker...
- CVE-2026-87436 — Incomplete cleanup in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker...
- CVE-2026-87446 — Incomplete cleanup in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker...
- CVE-2026-85043 — Incomplete cleanup in Network in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to...
- CVE-2026-78600 — Incomplete Cleanup in Elastic Cloud on Kubernetes Leading to Unauthorized Cross-Namespace Credential Retention
- CVE-2026-77037 — multer vulnerable to Denial of Service via file descriptor leak on aborted uploads
- CVE-2026-82237 — filebrowser through 2.63.23 Stale Share Link via File Rename
- CVE-2026-82236 — File Browser 2.63.6 through 2.63.23 Share Link Exposure via File Deletion