CVE sync 2026-11-10T22:30:31Z
This commit is contained in:
Vulnerability Bot
@@ -0,0 +1,206 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2025-0008",
|
||||
"assignerOrgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "AMD",
|
||||
"dateReserved": "2024-10-10T20:27:44.798Z",
|
||||
"datePublished": "2026-11-10T22:16:00.457Z",
|
||||
"dateUpdated": "2026-11-10T22:16:00.457Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
|
||||
"shortName": "AMD",
|
||||
"dateUpdated": "2026-11-10T22:16:00.457Z"
|
||||
},
|
||||
"affected": [
|
||||
{
|
||||
"defaultStatus": "affected",
|
||||
"vendor": "AMD",
|
||||
"product": "AMD EPYC™ 7003 Series Processors",
|
||||
"versions": [
|
||||
{
|
||||
"version": "MilanPI 1.0.0.G",
|
||||
"status": "unaffected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"defaultStatus": "affected",
|
||||
"vendor": "AMD",
|
||||
"product": "AMD EPYC™ 7002 Series Processors",
|
||||
"versions": [
|
||||
{
|
||||
"version": "RomePI-SP3_1.0.0.Q",
|
||||
"status": "unaffected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"defaultStatus": "affected",
|
||||
"vendor": "AMD",
|
||||
"product": "AMD EPYC™ 7001 Series Processors",
|
||||
"versions": [
|
||||
{
|
||||
"version": "NaplesPI-SP3_1.0.0.T",
|
||||
"status": "unaffected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"defaultStatus": "affected",
|
||||
"vendor": "AMD",
|
||||
"product": "AMD Ryzen™ 3000 Series Desktop Processors",
|
||||
"versions": [
|
||||
{
|
||||
"version": "ComboAM4v2 1.2.0.10",
|
||||
"status": "unaffected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"defaultStatus": "affected",
|
||||
"vendor": "AMD",
|
||||
"product": "AMD Ryzen™ Threadripper™ PRO 3000 WX-Series Processors",
|
||||
"versions": [
|
||||
{
|
||||
"version": "ChagallWSPI-sWRX8 1.0.0.D",
|
||||
"status": "unaffected"
|
||||
},
|
||||
{
|
||||
"version": "CastlePeakWSPI-sWRX8 1.0.0.I",
|
||||
"status": "unaffected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"defaultStatus": "affected",
|
||||
"vendor": "AMD",
|
||||
"product": "AMD Ryzen™ Threadripper™ PRO 5000 WX-Series Processors",
|
||||
"versions": [
|
||||
{
|
||||
"version": "ChagallWSPI-sWRX8 1.0.0.D",
|
||||
"status": "unaffected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"defaultStatus": "affected",
|
||||
"vendor": "AMD",
|
||||
"product": "AMD Ryzen™ 3000 Series Desktop Processors",
|
||||
"versions": [
|
||||
{
|
||||
"version": "ComboAM4 1.0.0.10",
|
||||
"status": "unaffected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"defaultStatus": "affected",
|
||||
"vendor": "AMD",
|
||||
"product": "AMD EPYC™ Embedded 7003 Series Processors",
|
||||
"versions": [
|
||||
{
|
||||
"version": "EmbMilanPI-SP3 1.0.0.B",
|
||||
"status": "unaffected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"defaultStatus": "affected",
|
||||
"vendor": "AMD",
|
||||
"product": "AMD EPYC™ Embedded 7002 Series Processors",
|
||||
"versions": [
|
||||
{
|
||||
"version": "EmbeddedRomePI-SP3 1.0.0.G",
|
||||
"status": "unaffected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"defaultStatus": "affected",
|
||||
"vendor": "AMD",
|
||||
"product": "AMD EPYC™ Embedded 3000 Series Processors",
|
||||
"versions": [
|
||||
{
|
||||
"version": "SnowyOwl_SP4_SP4r2.1.1.0.I",
|
||||
"status": "unaffected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"datePublic": "2026-11-10T22:15:38.267Z",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Insufficient verification of data authenticity may allow a local attacker to bypass Secure Debug Unlock (SDU), potentially resulting in unauthorized debug access.",
|
||||
"supportingMedia": [
|
||||
{
|
||||
"base64": false,
|
||||
"type": "text/html",
|
||||
"value": "Insufficient verification of data authenticity may allow a local attacker to bypass Secure Debug Unlock (SDU), potentially resulting in unauthorized debug access.<br>"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"cweId": "CWE-347",
|
||||
"description": "CWE-347 Improper Verification of Cryptographic Signature",
|
||||
"lang": "en",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-4018.html"
|
||||
},
|
||||
{
|
||||
"url": "https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-3049.html"
|
||||
}
|
||||
],
|
||||
"source": {
|
||||
"discovery": "UNKNOWN"
|
||||
},
|
||||
"x_generator": {
|
||||
"engine": "AMD PSIRT Automation 1.0"
|
||||
},
|
||||
"metrics": [
|
||||
{
|
||||
"cvssV4_0": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "NONE",
|
||||
"privilegesRequired": "HIGH",
|
||||
"userInteraction": "NONE",
|
||||
"vulnConfidentialityImpact": "HIGH",
|
||||
"vulnIntegrityImpact": "HIGH",
|
||||
"vulnAvailabilityImpact": "HIGH",
|
||||
"subConfidentialityImpact": "NONE",
|
||||
"subIntegrityImpact": "NONE",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"baseScore": 8.4,
|
||||
"baseSeverity": "HIGH"
|
||||
},
|
||||
"format": "CVSS",
|
||||
"scenarios": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "GENERAL"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,188 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2025-0027",
|
||||
"assignerOrgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "AMD",
|
||||
"dateReserved": "2024-11-21T16:17:38.456Z",
|
||||
"datePublished": "2026-11-10T21:45:16.789Z",
|
||||
"dateUpdated": "2026-11-10T21:45:16.789Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
|
||||
"shortName": "AMD",
|
||||
"dateUpdated": "2026-11-10T21:45:16.789Z"
|
||||
},
|
||||
"affected": [
|
||||
{
|
||||
"defaultStatus": "affected",
|
||||
"vendor": "AMD",
|
||||
"product": "AMD EPYC™ 9004 Series Processors",
|
||||
"versions": [
|
||||
{
|
||||
"version": "GenoaPI_1.0.0.J",
|
||||
"status": "unaffected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"defaultStatus": "affected",
|
||||
"vendor": "AMD",
|
||||
"product": "AMD EPYC™ 7003 Series Processors",
|
||||
"versions": [
|
||||
{
|
||||
"version": "MilanPI-SP3_1.0.0.K",
|
||||
"status": "unaffected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"defaultStatus": "affected",
|
||||
"vendor": "AMD",
|
||||
"product": "AMD EPYC™ 9005 Series Processors",
|
||||
"versions": [
|
||||
{
|
||||
"version": "TurinPI_1.0.0.A",
|
||||
"status": "unaffected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"defaultStatus": "affected",
|
||||
"vendor": "AMD",
|
||||
"product": "AMD EPYC™ 8004 Series Processors",
|
||||
"versions": [
|
||||
{
|
||||
"version": "GenoaPI_1.0.0.J",
|
||||
"status": "unaffected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"defaultStatus": "affected",
|
||||
"vendor": "AMD",
|
||||
"product": "AMD EPYC™ Embedded 7003 Series Processors",
|
||||
"versions": [
|
||||
{
|
||||
"version": "EmbMilanPI-SP3 1.0.0.E",
|
||||
"status": "unaffected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"defaultStatus": "affected",
|
||||
"vendor": "AMD",
|
||||
"product": "AMD EPYC™ Embedded 9004 Series Processors (formerly codenamed \"Genoa\")",
|
||||
"versions": [
|
||||
{
|
||||
"version": "EmbeddedGenoaPI_1.0.0.E",
|
||||
"status": "unaffected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"defaultStatus": "affected",
|
||||
"vendor": "AMD",
|
||||
"product": "AMD EPYC™ Embedded 9005 Series Processors",
|
||||
"versions": [
|
||||
{
|
||||
"version": "EmbeddedTurinPI_SP5_1004",
|
||||
"status": "unaffected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"defaultStatus": "affected",
|
||||
"vendor": "AMD",
|
||||
"product": "AMD EPYC™ Embedded 9004 Series Processors (formerly codenamed \"Bergamo\")",
|
||||
"versions": [
|
||||
{
|
||||
"version": "EmbeddedGenoaPI_1.0.0.E",
|
||||
"status": "unaffected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"defaultStatus": "affected",
|
||||
"vendor": "AMD",
|
||||
"product": "AMD EPYC™ Embedded 8004 Series Processors",
|
||||
"versions": [
|
||||
{
|
||||
"version": "EmbeddedGenoaPI_1.0.0.E",
|
||||
"status": "unaffected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"datePublic": "2026-11-10T21:43:53.978Z",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Improper access control in AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to bypass Reverse Map Table (RMP) protections, potentially impacting the integrity of Secure Encrypted Virtualization-Secure Nested Paging (SEV-SNP) guest memory.",
|
||||
"supportingMedia": [
|
||||
{
|
||||
"base64": false,
|
||||
"type": "text/html",
|
||||
"value": "Improper access control in AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to bypass Reverse Map Table (RMP) protections, potentially impacting the integrity of Secure Encrypted Virtualization-Secure Nested Paging (SEV-SNP) guest memory.<br>"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"cweId": "CWE-1284",
|
||||
"description": "CWE-1284 Improper Validation of Specified Quantity in Input",
|
||||
"lang": "en",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-3037.html"
|
||||
}
|
||||
],
|
||||
"source": {
|
||||
"discovery": "UNKNOWN"
|
||||
},
|
||||
"x_generator": {
|
||||
"engine": "AMD PSIRT Automation 1.0"
|
||||
},
|
||||
"metrics": [
|
||||
{
|
||||
"cvssV4_0": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "NONE",
|
||||
"privilegesRequired": "HIGH",
|
||||
"userInteraction": "NONE",
|
||||
"vulnConfidentialityImpact": "NONE",
|
||||
"vulnIntegrityImpact": "NONE",
|
||||
"vulnAvailabilityImpact": "NONE",
|
||||
"subConfidentialityImpact": "NONE",
|
||||
"subIntegrityImpact": "HIGH",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"baseScore": 5.9,
|
||||
"baseSeverity": "MEDIUM"
|
||||
},
|
||||
"format": "CVSS",
|
||||
"scenarios": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "GENERAL"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,111 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2025-29940",
|
||||
"assignerOrgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "AMD",
|
||||
"dateReserved": "2025-03-12T15:14:59.391Z",
|
||||
"datePublished": "2026-11-10T21:45:05.660Z",
|
||||
"dateUpdated": "2026-11-10T21:45:05.660Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
|
||||
"shortName": "AMD",
|
||||
"dateUpdated": "2026-11-10T21:45:05.660Z"
|
||||
},
|
||||
"affected": [
|
||||
{
|
||||
"defaultStatus": "affected",
|
||||
"vendor": "AMD",
|
||||
"product": "AMD EPYC™ 9005 Series Processors",
|
||||
"versions": [
|
||||
{
|
||||
"version": "TurinPI_1.0.0.A",
|
||||
"status": "unaffected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"defaultStatus": "affected",
|
||||
"vendor": "AMD",
|
||||
"product": "AMD EPYC™ Embedded 9005 Series Processors",
|
||||
"versions": [
|
||||
{
|
||||
"version": "EmbeddedTurinPI_SP5_1004",
|
||||
"status": "unaffected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"datePublic": "2026-11-10T21:43:44.836Z",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Unverified ownership in Secure Encrypted Virtualization (SEV) firmware could allow a privileged attacker with access to a malicious hypervisor to overwrite guest memory if segmented Reverse Map Table (RMP) is enabled potentially resulting in loss of guest data integrity.",
|
||||
"supportingMedia": [
|
||||
{
|
||||
"base64": false,
|
||||
"type": "text/html",
|
||||
"value": "Unverified ownership in Secure Encrypted Virtualization (SEV) firmware could allow a privileged attacker with access to a malicious hypervisor to overwrite guest memory if segmented Reverse Map Table (RMP) is enabled potentially resulting in loss of guest data integrity.<br>"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"cweId": "CWE-283",
|
||||
"description": "CWE-283 Unverified Ownership",
|
||||
"lang": "en",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-3037.html"
|
||||
}
|
||||
],
|
||||
"source": {
|
||||
"discovery": "UNKNOWN"
|
||||
},
|
||||
"x_generator": {
|
||||
"engine": "AMD PSIRT Automation 1.0"
|
||||
},
|
||||
"metrics": [
|
||||
{
|
||||
"cvssV4_0": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "NONE",
|
||||
"privilegesRequired": "HIGH",
|
||||
"userInteraction": "NONE",
|
||||
"vulnConfidentialityImpact": "NONE",
|
||||
"vulnIntegrityImpact": "NONE",
|
||||
"vulnAvailabilityImpact": "NONE",
|
||||
"subConfidentialityImpact": "NONE",
|
||||
"subIntegrityImpact": "HIGH",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"baseScore": 5.9,
|
||||
"baseSeverity": "MEDIUM"
|
||||
},
|
||||
"format": "CVSS",
|
||||
"scenarios": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "GENERAL"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,199 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2025-29941",
|
||||
"assignerOrgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "AMD",
|
||||
"dateReserved": "2025-03-12T15:14:59.391Z",
|
||||
"datePublished": "2026-11-10T22:12:52.443Z",
|
||||
"dateUpdated": "2026-11-10T22:12:52.443Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
|
||||
"shortName": "AMD",
|
||||
"dateUpdated": "2026-11-10T22:12:52.443Z"
|
||||
},
|
||||
"affected": [
|
||||
{
|
||||
"defaultStatus": "affected",
|
||||
"vendor": "AMD",
|
||||
"product": "AMD EPYC™ 9004 Series Processors",
|
||||
"versions": [
|
||||
{
|
||||
"version": "GenoaPI_1.0.0.J",
|
||||
"status": "unaffected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"defaultStatus": "affected",
|
||||
"vendor": "AMD",
|
||||
"product": "AMD EPYC™ 7003 Series Processors",
|
||||
"versions": [
|
||||
{
|
||||
"version": "MilanPI-SP3_1.0.0.K",
|
||||
"status": "unaffected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"defaultStatus": "affected",
|
||||
"vendor": "AMD",
|
||||
"product": "AMD EPYC™ 9005 Series Processors",
|
||||
"versions": [
|
||||
{
|
||||
"version": "TurinPI_1.0.0.B",
|
||||
"status": "unaffected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"defaultStatus": "affected",
|
||||
"vendor": "AMD",
|
||||
"product": "AMD EPYC™ 8004 Series Processors",
|
||||
"versions": [
|
||||
{
|
||||
"version": "GenoaPI_1.0.0.J",
|
||||
"status": "unaffected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"defaultStatus": "affected",
|
||||
"vendor": "AMD",
|
||||
"product": "AMD EPYC™ 8005 Series Processors",
|
||||
"versions": [
|
||||
{
|
||||
"version": "TurinPI_1.0.0.B",
|
||||
"status": "unaffected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"defaultStatus": "affected",
|
||||
"vendor": "AMD",
|
||||
"product": "AMD EPYC™ Embedded 7003 Series Processors",
|
||||
"versions": [
|
||||
{
|
||||
"version": "EmbMilanPI-SP3 1.0.0.E",
|
||||
"status": "unaffected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"defaultStatus": "affected",
|
||||
"vendor": "AMD",
|
||||
"product": "AMD EPYC™ Embedded 9004 Series Processors (formerly codenamed \"Genoa\")",
|
||||
"versions": [
|
||||
{
|
||||
"version": "EmbeddedGenoaPI_1.0.0.E",
|
||||
"status": "unaffected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"defaultStatus": "affected",
|
||||
"vendor": "AMD",
|
||||
"product": "AMD EPYC™ Embedded 9005 Series Processors",
|
||||
"versions": [
|
||||
{
|
||||
"version": "EmbeddedTurinPI_SP5_1005",
|
||||
"status": "unaffected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"defaultStatus": "affected",
|
||||
"vendor": "AMD",
|
||||
"product": "AMD EPYC™ Embedded 9004 Series Processors (formerly codenamed \"Bergamo\")",
|
||||
"versions": [
|
||||
{
|
||||
"version": "EmbeddedGenoaPI_1.0.0.E",
|
||||
"status": "unaffected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"defaultStatus": "affected",
|
||||
"vendor": "AMD",
|
||||
"product": "AMD EPYC™ Embedded 8004 Series Processors",
|
||||
"versions": [
|
||||
{
|
||||
"version": "EmbeddedGenoaPI_1.0.0.E",
|
||||
"status": "unaffected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"datePublic": "2026-11-10T22:09:19.122Z",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Incorrect usage of seeds in pseudo-random number generator in the Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor or migration agent to import a forged guest context potentially resulting in loss of confidentiality for derived guest keys.",
|
||||
"supportingMedia": [
|
||||
{
|
||||
"base64": false,
|
||||
"type": "text/html",
|
||||
"value": "Incorrect usage of seeds in pseudo-random number generator in the Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor or migration agent to import a forged guest context potentially resulting in loss of confidentiality for derived guest keys.<br>"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"cweId": "CWE-335",
|
||||
"description": "CWE-335 Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG)",
|
||||
"lang": "en",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-3038.html"
|
||||
}
|
||||
],
|
||||
"source": {
|
||||
"discovery": "UNKNOWN"
|
||||
},
|
||||
"x_generator": {
|
||||
"engine": "AMD PSIRT Automation 1.0"
|
||||
},
|
||||
"metrics": [
|
||||
{
|
||||
"cvssV4_0": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "NONE",
|
||||
"privilegesRequired": "LOW",
|
||||
"userInteraction": "NONE",
|
||||
"vulnConfidentialityImpact": "NONE",
|
||||
"vulnIntegrityImpact": "NONE",
|
||||
"vulnAvailabilityImpact": "NONE",
|
||||
"subConfidentialityImpact": "HIGH",
|
||||
"subIntegrityImpact": "NONE",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"baseScore": 6,
|
||||
"baseSeverity": "MEDIUM"
|
||||
},
|
||||
"format": "CVSS",
|
||||
"scenarios": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "GENERAL"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,199 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2025-48504",
|
||||
"assignerOrgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "AMD",
|
||||
"dateReserved": "2025-05-22T16:34:02.896Z",
|
||||
"datePublished": "2026-11-10T22:13:08.045Z",
|
||||
"dateUpdated": "2026-11-10T22:13:08.045Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
|
||||
"shortName": "AMD",
|
||||
"dateUpdated": "2026-11-10T22:13:08.045Z"
|
||||
},
|
||||
"affected": [
|
||||
{
|
||||
"defaultStatus": "affected",
|
||||
"vendor": "AMD",
|
||||
"product": "AMD EPYC™ 9004 Series Processors",
|
||||
"versions": [
|
||||
{
|
||||
"version": "GenoaPI_1.0.0.J",
|
||||
"status": "unaffected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"defaultStatus": "affected",
|
||||
"vendor": "AMD",
|
||||
"product": "AMD EPYC™ 7003 Series Processors",
|
||||
"versions": [
|
||||
{
|
||||
"version": "MilanPI-SP3_1.0.0.K",
|
||||
"status": "unaffected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"defaultStatus": "affected",
|
||||
"vendor": "AMD",
|
||||
"product": "AMD EPYC™ 9005 Series Processors",
|
||||
"versions": [
|
||||
{
|
||||
"version": "TurinPI_1.0.0.B",
|
||||
"status": "unaffected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"defaultStatus": "affected",
|
||||
"vendor": "AMD",
|
||||
"product": "AMD EPYC™ 8004 Series Processors",
|
||||
"versions": [
|
||||
{
|
||||
"version": "GenoaPI_1.0.0.J",
|
||||
"status": "unaffected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"defaultStatus": "affected",
|
||||
"vendor": "AMD",
|
||||
"product": "AMD EPYC™ 8005 Series Processors",
|
||||
"versions": [
|
||||
{
|
||||
"version": "TurinPI_1.0.0.B",
|
||||
"status": "unaffected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"defaultStatus": "affected",
|
||||
"vendor": "AMD",
|
||||
"product": "AMD EPYC™ Embedded 7003 Series Processors",
|
||||
"versions": [
|
||||
{
|
||||
"version": "EmbMilanPI-SP3 1.0.0.E",
|
||||
"status": "unaffected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"defaultStatus": "affected",
|
||||
"vendor": "AMD",
|
||||
"product": "AMD EPYC™ Embedded 9004 Series Processors (formerly codenamed \"Genoa\")",
|
||||
"versions": [
|
||||
{
|
||||
"version": "EmbeddedGenoaPI_1.0.0.E",
|
||||
"status": "unaffected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"defaultStatus": "affected",
|
||||
"vendor": "AMD",
|
||||
"product": "AMD EPYC™ Embedded 9005 Series Processors",
|
||||
"versions": [
|
||||
{
|
||||
"version": "EmbeddedTurinPI_SP5_1005",
|
||||
"status": "unaffected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"defaultStatus": "affected",
|
||||
"vendor": "AMD",
|
||||
"product": "AMD EPYC™ Embedded 9004 Series Processors (formerly codenamed \"Bergamo\")",
|
||||
"versions": [
|
||||
{
|
||||
"version": "EmbeddedGenoaPI_1.0.0.E",
|
||||
"status": "unaffected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"defaultStatus": "affected",
|
||||
"vendor": "AMD",
|
||||
"product": "AMD EPYC™ Embedded 8004 Series Processors",
|
||||
"versions": [
|
||||
{
|
||||
"version": "EmbeddedGenoaPI_1.0.0.E",
|
||||
"status": "unaffected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"datePublic": "2026-11-10T22:09:27.607Z",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Operation on a resource after expiration or release in the Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to manipulate metadata pages potentially resulting in the loss of confidentiality and integrity of guest memory.",
|
||||
"supportingMedia": [
|
||||
{
|
||||
"base64": false,
|
||||
"type": "text/html",
|
||||
"value": "Operation on a resource after expiration or release in the Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to manipulate metadata pages potentially resulting in the loss of confidentiality and integrity of guest memory.<br>"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"cweId": "CWE-672",
|
||||
"description": "CWE-672 Operation on a Resource after Expiration or Release",
|
||||
"lang": "en",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-3038.html"
|
||||
}
|
||||
],
|
||||
"source": {
|
||||
"discovery": "UNKNOWN"
|
||||
},
|
||||
"x_generator": {
|
||||
"engine": "AMD PSIRT Automation 1.0"
|
||||
},
|
||||
"metrics": [
|
||||
{
|
||||
"cvssV4_0": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:H/SA:N",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "PRESENT",
|
||||
"privilegesRequired": "HIGH",
|
||||
"userInteraction": "NONE",
|
||||
"vulnConfidentialityImpact": "NONE",
|
||||
"vulnIntegrityImpact": "HIGH",
|
||||
"vulnAvailabilityImpact": "NONE",
|
||||
"subConfidentialityImpact": "NONE",
|
||||
"subIntegrityImpact": "HIGH",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"baseScore": 6.8,
|
||||
"baseSeverity": "MEDIUM"
|
||||
},
|
||||
"format": "CVSS",
|
||||
"scenarios": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "GENERAL"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,188 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2025-52535",
|
||||
"assignerOrgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "AMD",
|
||||
"dateReserved": "2025-06-17T16:53:10.413Z",
|
||||
"datePublished": "2026-11-10T21:44:39.643Z",
|
||||
"dateUpdated": "2026-11-10T21:44:39.643Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
|
||||
"shortName": "AMD",
|
||||
"dateUpdated": "2026-11-10T21:44:39.643Z"
|
||||
},
|
||||
"affected": [
|
||||
{
|
||||
"defaultStatus": "affected",
|
||||
"vendor": "AMD",
|
||||
"product": "AMD EPYC™ 9004 Series Processors",
|
||||
"versions": [
|
||||
{
|
||||
"version": "GenoaPI_1.0.0.J",
|
||||
"status": "unaffected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"defaultStatus": "affected",
|
||||
"vendor": "AMD",
|
||||
"product": "AMD EPYC™ 7003 Series Processors",
|
||||
"versions": [
|
||||
{
|
||||
"version": "MilanPI-SP3_1.0.0.K",
|
||||
"status": "unaffected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"defaultStatus": "affected",
|
||||
"vendor": "AMD",
|
||||
"product": "AMD EPYC™ 9005 Series Processors",
|
||||
"versions": [
|
||||
{
|
||||
"version": "TurinPI_1.0.0.A",
|
||||
"status": "unaffected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"defaultStatus": "affected",
|
||||
"vendor": "AMD",
|
||||
"product": "AMD EPYC™ 8004 Series Processors",
|
||||
"versions": [
|
||||
{
|
||||
"version": "GenoaPI_1.0.0.J",
|
||||
"status": "unaffected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"defaultStatus": "affected",
|
||||
"vendor": "AMD",
|
||||
"product": "AMD EPYC™ Embedded 7003 Series Processors",
|
||||
"versions": [
|
||||
{
|
||||
"version": "EmbMilanPI-SP3 1.0.0.E",
|
||||
"status": "unaffected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"defaultStatus": "affected",
|
||||
"vendor": "AMD",
|
||||
"product": "AMD EPYC™ Embedded 9004 Series Processors (formerly codenamed \"Genoa\")",
|
||||
"versions": [
|
||||
{
|
||||
"version": "EmbeddedGenoaPI_1.0.0.E",
|
||||
"status": "unaffected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"defaultStatus": "affected",
|
||||
"vendor": "AMD",
|
||||
"product": "AMD EPYC™ Embedded 9005 Series Processors",
|
||||
"versions": [
|
||||
{
|
||||
"version": "EmbeddedTurinPI_SP5_1004",
|
||||
"status": "unaffected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"defaultStatus": "affected",
|
||||
"vendor": "AMD",
|
||||
"product": "AMD EPYC™ Embedded 9004 Series Processors (formerly codenamed \"Bergamo\")",
|
||||
"versions": [
|
||||
{
|
||||
"version": "EmbeddedGenoaPI_1.0.0.E",
|
||||
"status": "unaffected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"defaultStatus": "affected",
|
||||
"vendor": "AMD",
|
||||
"product": "AMD EPYC™ Embedded 8004 Series Processors",
|
||||
"versions": [
|
||||
{
|
||||
"version": "EmbeddedGenoaPI_1.0.0.E",
|
||||
"status": "unaffected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"datePublic": "2026-11-10T21:43:30.590Z",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Improper resource reuse in the AMD Secure Encrypted Virtualization (SEV) firmware could allow an attacker with hypervisor access to write to the Reverse Map Table (RMP) protected memory, potentially resulting in loss of guest memory integrity.",
|
||||
"supportingMedia": [
|
||||
{
|
||||
"base64": false,
|
||||
"type": "text/html",
|
||||
"value": "Improper resource reuse in the AMD Secure Encrypted Virtualization (SEV) firmware could allow an attacker with hypervisor access to write to the Reverse Map Table (RMP) protected memory, potentially resulting in loss of guest memory integrity.<br>"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"cweId": "CWE-672",
|
||||
"description": "CWE-672 Operation on a Resource after Expiration or Release",
|
||||
"lang": "en",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-3037.html"
|
||||
}
|
||||
],
|
||||
"source": {
|
||||
"discovery": "UNKNOWN"
|
||||
},
|
||||
"x_generator": {
|
||||
"engine": "AMD PSIRT Automation 1.0"
|
||||
},
|
||||
"metrics": [
|
||||
{
|
||||
"cvssV4_0": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "NONE",
|
||||
"privilegesRequired": "HIGH",
|
||||
"userInteraction": "NONE",
|
||||
"vulnConfidentialityImpact": "NONE",
|
||||
"vulnIntegrityImpact": "NONE",
|
||||
"vulnAvailabilityImpact": "NONE",
|
||||
"subConfidentialityImpact": "NONE",
|
||||
"subIntegrityImpact": "HIGH",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"baseScore": 5.9,
|
||||
"baseSeverity": "MEDIUM"
|
||||
},
|
||||
"format": "CVSS",
|
||||
"scenarios": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "GENERAL"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,111 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2025-52537",
|
||||
"assignerOrgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "AMD",
|
||||
"dateReserved": "2025-06-17T16:53:10.413Z",
|
||||
"datePublished": "2026-11-10T21:44:52.972Z",
|
||||
"dateUpdated": "2026-11-10T21:44:52.972Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
|
||||
"shortName": "AMD",
|
||||
"dateUpdated": "2026-11-10T21:44:52.972Z"
|
||||
},
|
||||
"affected": [
|
||||
{
|
||||
"defaultStatus": "affected",
|
||||
"vendor": "AMD",
|
||||
"product": "AMD EPYC™ 9005 Series Processors",
|
||||
"versions": [
|
||||
{
|
||||
"version": "TurinPI_1.0.0.A",
|
||||
"status": "unaffected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"defaultStatus": "affected",
|
||||
"vendor": "AMD",
|
||||
"product": "AMD EPYC™ Embedded 9005 Series Processors",
|
||||
"versions": [
|
||||
{
|
||||
"version": "EmbeddedTurinPI_SP5_1004",
|
||||
"status": "unaffected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"datePublic": "2026-11-10T21:43:37.116Z",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Improper access control within the AMD Secure Encrypted Virtualization (SEV) firmware could allow an attacker with administrative privileges to tamper with memory, potentially resulting in loss of guest memory integrity.",
|
||||
"supportingMedia": [
|
||||
{
|
||||
"base64": false,
|
||||
"type": "text/html",
|
||||
"value": "Improper access control within the AMD Secure Encrypted Virtualization (SEV) firmware could allow an attacker with administrative privileges to tamper with memory, potentially resulting in loss of guest memory integrity.<br>"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"cweId": "CWE-362",
|
||||
"description": "CWE-362 Concurrent Execution using Shared Resources with Improper Synchronization (\"Race_Condition\")",
|
||||
"lang": "en",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-3037.html"
|
||||
}
|
||||
],
|
||||
"source": {
|
||||
"discovery": "UNKNOWN"
|
||||
},
|
||||
"x_generator": {
|
||||
"engine": "AMD PSIRT Automation 1.0"
|
||||
},
|
||||
"metrics": [
|
||||
{
|
||||
"cvssV4_0": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "PRESENT",
|
||||
"privilegesRequired": "HIGH",
|
||||
"userInteraction": "NONE",
|
||||
"vulnConfidentialityImpact": "NONE",
|
||||
"vulnIntegrityImpact": "NONE",
|
||||
"vulnAvailabilityImpact": "NONE",
|
||||
"subConfidentialityImpact": "NONE",
|
||||
"subIntegrityImpact": "HIGH",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"baseScore": 4,
|
||||
"baseSeverity": "MEDIUM"
|
||||
},
|
||||
"format": "CVSS",
|
||||
"scenarios": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "GENERAL"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,111 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2025-54503",
|
||||
"assignerOrgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "AMD",
|
||||
"dateReserved": "2025-07-23T15:01:50.732Z",
|
||||
"datePublished": "2026-11-10T21:44:16.757Z",
|
||||
"dateUpdated": "2026-11-10T21:44:16.757Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
|
||||
"shortName": "AMD",
|
||||
"dateUpdated": "2026-11-10T21:44:16.757Z"
|
||||
},
|
||||
"affected": [
|
||||
{
|
||||
"defaultStatus": "affected",
|
||||
"vendor": "AMD",
|
||||
"product": "AMD EPYC™ 9005 Series Processors",
|
||||
"versions": [
|
||||
{
|
||||
"version": "TurinPI_1.0.0.A",
|
||||
"status": "unaffected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"defaultStatus": "affected",
|
||||
"vendor": "AMD",
|
||||
"product": "AMD EPYC™ Embedded 9005 Series Processors",
|
||||
"versions": [
|
||||
{
|
||||
"version": "EmbeddedTurinPI_SP5_1004",
|
||||
"status": "unaffected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"datePublic": "2026-11-10T21:43:17.778Z",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Improper handling of overlap between protected memory ranges in the Secure Encrypted Virtualization (SEV) firmware could allow a privileged attacker to cause misconfigurations in the RMP potentially resulting in loss of integrity.",
|
||||
"supportingMedia": [
|
||||
{
|
||||
"base64": false,
|
||||
"type": "text/html",
|
||||
"value": "Improper handling of overlap between protected memory ranges in the Secure Encrypted Virtualization (SEV) firmware could allow a privileged attacker to cause misconfigurations in the RMP potentially resulting in loss of integrity.<br>"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"cweId": "CWE-1260",
|
||||
"description": "CWE-1260 Improper Handling of Overlap Between Protected Memory Ranges",
|
||||
"lang": "en",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-3037.html"
|
||||
}
|
||||
],
|
||||
"source": {
|
||||
"discovery": "UNKNOWN"
|
||||
},
|
||||
"x_generator": {
|
||||
"engine": "AMD PSIRT Automation 1.0"
|
||||
},
|
||||
"metrics": [
|
||||
{
|
||||
"cvssV4_0": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "NONE",
|
||||
"privilegesRequired": "HIGH",
|
||||
"userInteraction": "NONE",
|
||||
"vulnConfidentialityImpact": "NONE",
|
||||
"vulnIntegrityImpact": "NONE",
|
||||
"vulnAvailabilityImpact": "NONE",
|
||||
"subConfidentialityImpact": "NONE",
|
||||
"subIntegrityImpact": "HIGH",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"baseScore": 5.9,
|
||||
"baseSeverity": "MEDIUM"
|
||||
},
|
||||
"format": "CVSS",
|
||||
"scenarios": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "GENERAL"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,111 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2025-54504",
|
||||
"assignerOrgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "AMD",
|
||||
"dateReserved": "2025-07-23T15:01:50.732Z",
|
||||
"datePublished": "2026-11-10T21:43:45.286Z",
|
||||
"dateUpdated": "2026-11-10T21:43:45.286Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
|
||||
"shortName": "AMD",
|
||||
"dateUpdated": "2026-11-10T21:43:45.286Z"
|
||||
},
|
||||
"affected": [
|
||||
{
|
||||
"defaultStatus": "affected",
|
||||
"vendor": "AMD",
|
||||
"product": "AMD EPYC™ 9005 Series Processors",
|
||||
"versions": [
|
||||
{
|
||||
"version": "TurinPI_1.0.0.A",
|
||||
"status": "unaffected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"defaultStatus": "affected",
|
||||
"vendor": "AMD",
|
||||
"product": "AMD EPYC™ Embedded 9005 Series Processors",
|
||||
"versions": [
|
||||
{
|
||||
"version": "EmbeddedTurinPI_SP5_1004",
|
||||
"status": "unaffected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"datePublic": "2026-11-10T21:43:00.795Z",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Insufficient Granularity of Access Control in AMD Secure Encrypted Virtualization (SEV) firmware could allow an attacker with administrative privileges attacker to write to a trusted region used by AMD Secure Encrypted Virtualization-Encrypted State (SEV-ES), potentially resulting in loss of integrity.",
|
||||
"supportingMedia": [
|
||||
{
|
||||
"base64": false,
|
||||
"type": "text/html",
|
||||
"value": "Insufficient Granularity of Access Control in AMD Secure Encrypted Virtualization (SEV) firmware could allow an attacker with administrative privileges attacker to write to a trusted region used by AMD Secure Encrypted Virtualization-Encrypted State (SEV-ES), potentially resulting in loss of integrity.<br>"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"cweId": "CWE-1220",
|
||||
"description": "CWE-1220 Insufficient Granularity of Access Control",
|
||||
"lang": "en",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-3037.html"
|
||||
}
|
||||
],
|
||||
"source": {
|
||||
"discovery": "UNKNOWN"
|
||||
},
|
||||
"x_generator": {
|
||||
"engine": "AMD PSIRT Automation 1.0"
|
||||
},
|
||||
"metrics": [
|
||||
{
|
||||
"cvssV4_0": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "NONE",
|
||||
"privilegesRequired": "HIGH",
|
||||
"userInteraction": "NONE",
|
||||
"vulnConfidentialityImpact": "NONE",
|
||||
"vulnIntegrityImpact": "NONE",
|
||||
"vulnAvailabilityImpact": "NONE",
|
||||
"subConfidentialityImpact": "NONE",
|
||||
"subIntegrityImpact": "HIGH",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"baseScore": 5.9,
|
||||
"baseSeverity": "MEDIUM"
|
||||
},
|
||||
"format": "CVSS",
|
||||
"scenarios": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "GENERAL"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,111 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2025-54506",
|
||||
"assignerOrgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "AMD",
|
||||
"dateReserved": "2025-07-23T15:01:50.733Z",
|
||||
"datePublished": "2026-11-10T21:44:27.705Z",
|
||||
"dateUpdated": "2026-11-10T21:44:27.705Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
|
||||
"shortName": "AMD",
|
||||
"dateUpdated": "2026-11-10T21:44:27.705Z"
|
||||
},
|
||||
"affected": [
|
||||
{
|
||||
"defaultStatus": "affected",
|
||||
"vendor": "AMD",
|
||||
"product": "AMD EPYC™ 9005 Series Processors",
|
||||
"versions": [
|
||||
{
|
||||
"version": "TurinPI_1.0.0.A",
|
||||
"status": "unaffected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"defaultStatus": "affected",
|
||||
"vendor": "AMD",
|
||||
"product": "AMD EPYC™ Embedded 9005 Series Processors",
|
||||
"versions": [
|
||||
{
|
||||
"version": "EmbeddedTurinPI_SP5_1004",
|
||||
"status": "unaffected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"datePublic": "2026-11-10T21:43:24.131Z",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "A time-of-check to time-of-use (TOCTOU) race condition in the AMD SEV Secure Encrypted Virtualization (SEV) firmware could allow an attacker with administrative privileges to bypass security checks on scatter lists, potentially resulting in loss of guest integrity.",
|
||||
"supportingMedia": [
|
||||
{
|
||||
"base64": false,
|
||||
"type": "text/html",
|
||||
"value": "A time-of-check to time-of-use (TOCTOU) race condition in the AMD SEV Secure Encrypted Virtualization (SEV) firmware could allow an attacker with administrative privileges to bypass security checks on scatter lists, potentially resulting in loss of guest integrity.<br>"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"cweId": "CWE-367",
|
||||
"description": "CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition",
|
||||
"lang": "en",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-3037.html"
|
||||
}
|
||||
],
|
||||
"source": {
|
||||
"discovery": "UNKNOWN"
|
||||
},
|
||||
"x_generator": {
|
||||
"engine": "AMD PSIRT Automation 1.0"
|
||||
},
|
||||
"metrics": [
|
||||
{
|
||||
"cvssV4_0": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "PRESENT",
|
||||
"privilegesRequired": "HIGH",
|
||||
"userInteraction": "NONE",
|
||||
"vulnConfidentialityImpact": "NONE",
|
||||
"vulnIntegrityImpact": "NONE",
|
||||
"vulnAvailabilityImpact": "NONE",
|
||||
"subConfidentialityImpact": "NONE",
|
||||
"subIntegrityImpact": "HIGH",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"baseScore": 4,
|
||||
"baseSeverity": "MEDIUM"
|
||||
},
|
||||
"format": "CVSS",
|
||||
"scenarios": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "GENERAL"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,111 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2025-54508",
|
||||
"assignerOrgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "AMD",
|
||||
"dateReserved": "2025-07-23T15:01:50.733Z",
|
||||
"datePublished": "2026-11-10T21:44:05.041Z",
|
||||
"dateUpdated": "2026-11-10T21:44:05.041Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
|
||||
"shortName": "AMD",
|
||||
"dateUpdated": "2026-11-10T21:44:05.041Z"
|
||||
},
|
||||
"affected": [
|
||||
{
|
||||
"defaultStatus": "affected",
|
||||
"vendor": "AMD",
|
||||
"product": "AMD EPYC™ 9005 Series Processors",
|
||||
"versions": [
|
||||
{
|
||||
"version": "TurinPI_1.0.0.A",
|
||||
"status": "unaffected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"defaultStatus": "affected",
|
||||
"vendor": "AMD",
|
||||
"product": "AMD EPYC™ Embedded 9005 Series Processors",
|
||||
"versions": [
|
||||
{
|
||||
"version": "EmbeddedTurinPI_SP5_1004",
|
||||
"status": "unaffected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"datePublic": "2026-11-10T21:43:10.035Z",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Improper validation of Reverse Map Table (RMP) entries in the Secure Encrypted Virtualization (SEV) firmware could allow a privileged attacker to trigger concurrent modifications to RMP entries without proper synchronization potentially resulting in loss of data integrity.",
|
||||
"supportingMedia": [
|
||||
{
|
||||
"base64": false,
|
||||
"type": "text/html",
|
||||
"value": "Improper validation of Reverse Map Table (RMP) entries in the Secure Encrypted Virtualization (SEV) firmware could allow a privileged attacker to trigger concurrent modifications to RMP entries without proper synchronization potentially resulting in loss of data integrity.<br>"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"cweId": "CWE-179",
|
||||
"description": "CWE-179 Incorrect Behavior Order: Early Validation",
|
||||
"lang": "en",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-3037.html"
|
||||
}
|
||||
],
|
||||
"source": {
|
||||
"discovery": "UNKNOWN"
|
||||
},
|
||||
"x_generator": {
|
||||
"engine": "AMD PSIRT Automation 1.0"
|
||||
},
|
||||
"metrics": [
|
||||
{
|
||||
"cvssV4_0": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "PRESENT",
|
||||
"privilegesRequired": "HIGH",
|
||||
"userInteraction": "NONE",
|
||||
"vulnConfidentialityImpact": "NONE",
|
||||
"vulnIntegrityImpact": "NONE",
|
||||
"vulnAvailabilityImpact": "NONE",
|
||||
"subConfidentialityImpact": "NONE",
|
||||
"subIntegrityImpact": "HIGH",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"baseScore": 4,
|
||||
"baseSeverity": "MEDIUM"
|
||||
},
|
||||
"format": "CVSS",
|
||||
"scenarios": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "GENERAL"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "fortinet",
|
||||
"dateReserved": "2025-09-29T07:36:48.605Z",
|
||||
"datePublished": "2026-11-10T20:10:44.192Z",
|
||||
"dateUpdated": "2026-11-10T20:10:44.192Z"
|
||||
"dateUpdated": "2026-11-10T20:25:17.403Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -221,6 +221,40 @@
|
||||
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-190"
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"timestamp": "2026-11-10T20:24:12.066859Z",
|
||||
"id": "CVE-2025-61625",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"role": "CISA Coordinator",
|
||||
"version": "2.0.3"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-10T20:25:17.403Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,188 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2025-62620",
|
||||
"assignerOrgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "AMD",
|
||||
"dateReserved": "2025-10-16T20:46:13.454Z",
|
||||
"datePublished": "2026-11-10T21:43:31.443Z",
|
||||
"dateUpdated": "2026-11-10T21:43:31.443Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
|
||||
"shortName": "AMD",
|
||||
"dateUpdated": "2026-11-10T21:43:31.443Z"
|
||||
},
|
||||
"affected": [
|
||||
{
|
||||
"defaultStatus": "affected",
|
||||
"vendor": "AMD",
|
||||
"product": "AMD EPYC™ 9004 Series Processors",
|
||||
"versions": [
|
||||
{
|
||||
"version": "GenoaPI_1.0.0.J",
|
||||
"status": "unaffected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"defaultStatus": "affected",
|
||||
"vendor": "AMD",
|
||||
"product": "AMD EPYC™ 7003 Series Processors",
|
||||
"versions": [
|
||||
{
|
||||
"version": "MilanPI-SP3_1.0.0.K",
|
||||
"status": "unaffected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"defaultStatus": "affected",
|
||||
"vendor": "AMD",
|
||||
"product": "AMD EPYC™ 9005 Series Processors",
|
||||
"versions": [
|
||||
{
|
||||
"version": "TurinPI_1.0.0.A",
|
||||
"status": "unaffected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"defaultStatus": "affected",
|
||||
"vendor": "AMD",
|
||||
"product": "AMD EPYC™ 8004 Series Processors",
|
||||
"versions": [
|
||||
{
|
||||
"version": "GenoaPI_1.0.0.J",
|
||||
"status": "unaffected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"defaultStatus": "affected",
|
||||
"vendor": "AMD",
|
||||
"product": "AMD EPYC™ Embedded 7003 Series Processors",
|
||||
"versions": [
|
||||
{
|
||||
"version": "EmbMilanPI-SP3 1.0.0.E",
|
||||
"status": "unaffected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"defaultStatus": "affected",
|
||||
"vendor": "AMD",
|
||||
"product": "AMD EPYC™ Embedded 9004 Series Processors (formerly codenamed \"Genoa\")",
|
||||
"versions": [
|
||||
{
|
||||
"version": "EmbeddedGenoaPI_1.0.0.E",
|
||||
"status": "unaffected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"defaultStatus": "affected",
|
||||
"vendor": "AMD",
|
||||
"product": "AMD EPYC™ Embedded 9004 Series Processors (formerly codenamed \"Bergamo\")",
|
||||
"versions": [
|
||||
{
|
||||
"version": "EmbeddedGenoaPI_1.0.0.E",
|
||||
"status": "unaffected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"defaultStatus": "affected",
|
||||
"vendor": "AMD",
|
||||
"product": "AMD EPYC™ Embedded 8004 Series Processors",
|
||||
"versions": [
|
||||
{
|
||||
"version": "EmbeddedGenoaPI_1.0.0.E",
|
||||
"status": "unaffected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"defaultStatus": "affected",
|
||||
"vendor": "AMD",
|
||||
"product": "AMD EPYC™ Embedded 9005 Series Processors",
|
||||
"versions": [
|
||||
{
|
||||
"version": "EmbeddedTurinPI_SP5_1004",
|
||||
"status": "unaffected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"datePublic": "2026-11-10T21:42:53.372Z",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Improper validation of unsafe equivalence in input could allow an attacker with high privileges to reclaim the ring buffer queue status page, potentially resulting in loss of guest memory integrity.",
|
||||
"supportingMedia": [
|
||||
{
|
||||
"base64": false,
|
||||
"type": "text/html",
|
||||
"value": "Improper validation of unsafe equivalence in input could allow an attacker with high privileges to reclaim the ring buffer queue status page, potentially resulting in loss of guest memory integrity.<br>"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"cweId": "CWE-1289",
|
||||
"description": "CWE-1289 Improper Validation of Unsafe Equivalence in Input",
|
||||
"lang": "en",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-3037.html"
|
||||
}
|
||||
],
|
||||
"source": {
|
||||
"discovery": "UNKNOWN"
|
||||
},
|
||||
"x_generator": {
|
||||
"engine": "AMD PSIRT Automation 1.0"
|
||||
},
|
||||
"metrics": [
|
||||
{
|
||||
"cvssV4_0": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "NONE",
|
||||
"privilegesRequired": "HIGH",
|
||||
"userInteraction": "NONE",
|
||||
"vulnConfidentialityImpact": "NONE",
|
||||
"vulnIntegrityImpact": "NONE",
|
||||
"vulnAvailabilityImpact": "NONE",
|
||||
"subConfidentialityImpact": "NONE",
|
||||
"subIntegrityImpact": "HIGH",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"baseScore": 5.9,
|
||||
"baseSeverity": "MEDIUM"
|
||||
},
|
||||
"format": "CVSS",
|
||||
"scenarios": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "GENERAL"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,111 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2025-62621",
|
||||
"assignerOrgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "AMD",
|
||||
"dateReserved": "2025-10-16T20:46:13.454Z",
|
||||
"datePublished": "2026-11-10T21:43:12.100Z",
|
||||
"dateUpdated": "2026-11-10T21:43:12.100Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
|
||||
"shortName": "AMD",
|
||||
"dateUpdated": "2026-11-10T21:43:12.100Z"
|
||||
},
|
||||
"affected": [
|
||||
{
|
||||
"defaultStatus": "affected",
|
||||
"vendor": "AMD",
|
||||
"product": "AMD EPYC™ 9005 Series Processors",
|
||||
"versions": [
|
||||
{
|
||||
"version": "TurinPI_1.0.0.A",
|
||||
"status": "unaffected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"defaultStatus": "affected",
|
||||
"vendor": "AMD",
|
||||
"product": "AMD EPYC™ Embedded 9005 Series Processors",
|
||||
"versions": [
|
||||
{
|
||||
"version": "EmbeddedTurinPI_SP5_1004",
|
||||
"status": "unaffected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"datePublic": "2026-11-10T21:42:46.760Z",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Expected behavior violation in AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to bypass Reverse Map Table (RMP) protections, potentially resulting in a loss of Secure Encrypted Virtualization-Secure Nested Paging (SEV-SNP) guest memory integrity.",
|
||||
"supportingMedia": [
|
||||
{
|
||||
"base64": false,
|
||||
"type": "text/html",
|
||||
"value": "Expected behavior violation in AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to bypass Reverse Map Table (RMP) protections, potentially resulting in a loss of Secure Encrypted Virtualization-Secure Nested Paging (SEV-SNP) guest memory integrity.<br>"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"cweId": "CWE-440",
|
||||
"description": "CWE-440 Expected Behavior Violation",
|
||||
"lang": "en",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-3037.html"
|
||||
}
|
||||
],
|
||||
"source": {
|
||||
"discovery": "UNKNOWN"
|
||||
},
|
||||
"x_generator": {
|
||||
"engine": "AMD PSIRT Automation 1.0"
|
||||
},
|
||||
"metrics": [
|
||||
{
|
||||
"cvssV4_0": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:N",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "NONE",
|
||||
"privilegesRequired": "HIGH",
|
||||
"userInteraction": "NONE",
|
||||
"vulnConfidentialityImpact": "NONE",
|
||||
"vulnIntegrityImpact": "NONE",
|
||||
"vulnAvailabilityImpact": "NONE",
|
||||
"subConfidentialityImpact": "NONE",
|
||||
"subIntegrityImpact": "HIGH",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"baseScore": 5.9,
|
||||
"baseSeverity": "MEDIUM"
|
||||
},
|
||||
"format": "CVSS",
|
||||
"scenarios": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "GENERAL"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,166 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-0003",
|
||||
"assignerOrgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "AMD",
|
||||
"dateReserved": "2025-10-09T19:57:20.770Z",
|
||||
"datePublished": "2026-11-10T22:12:39.351Z",
|
||||
"dateUpdated": "2026-11-10T22:12:39.351Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
|
||||
"shortName": "AMD",
|
||||
"dateUpdated": "2026-11-10T22:12:39.351Z"
|
||||
},
|
||||
"affected": [
|
||||
{
|
||||
"defaultStatus": "affected",
|
||||
"vendor": "AMD",
|
||||
"product": "AMD EPYC™ 9004 Series Processors",
|
||||
"versions": [
|
||||
{
|
||||
"version": "GenoaPI_1.0.0.J",
|
||||
"status": "unaffected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"defaultStatus": "affected",
|
||||
"vendor": "AMD",
|
||||
"product": "AMD EPYC™ 7003 Series Processors",
|
||||
"versions": [
|
||||
{
|
||||
"version": "MilanPI-SP3_1.0.0.K",
|
||||
"status": "unaffected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"defaultStatus": "affected",
|
||||
"vendor": "AMD",
|
||||
"product": "AMD EPYC™ 8004 Series Processors",
|
||||
"versions": [
|
||||
{
|
||||
"version": "GenoaPI_1.0.0.J",
|
||||
"status": "unaffected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"defaultStatus": "affected",
|
||||
"vendor": "AMD",
|
||||
"product": "AMD EPYC™ Embedded 7003 Series Processors",
|
||||
"versions": [
|
||||
{
|
||||
"version": "EmbMilanPI-SP3 1.0.0.E",
|
||||
"status": "unaffected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"defaultStatus": "affected",
|
||||
"vendor": "AMD",
|
||||
"product": "AMD EPYC™ Embedded 9004 Series Processors (formerly codenamed \"Genoa\")",
|
||||
"versions": [
|
||||
{
|
||||
"version": "EmbeddedGenoaPI_1.0.0.E",
|
||||
"status": "unaffected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"defaultStatus": "affected",
|
||||
"vendor": "AMD",
|
||||
"product": "AMD EPYC™ Embedded 9004 Series Processors (formerly codenamed \"Bergamo\")",
|
||||
"versions": [
|
||||
{
|
||||
"version": "EmbeddedGenoaPI_1.0.0.E",
|
||||
"status": "unaffected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"defaultStatus": "affected",
|
||||
"vendor": "AMD",
|
||||
"product": "AMD EPYC™ Embedded 8004 Series Processors",
|
||||
"versions": [
|
||||
{
|
||||
"version": "EmbeddedGenoaPI_1.0.0.E",
|
||||
"status": "unaffected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"datePublic": "2026-11-10T22:09:10.637Z",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Use of a per-part static key in the ASP Bootloader could allow an attacker to downgrade the Secure Encrypted Virtualization (SEV) firmware and exploit known vulnerabilities to decrypt memory potentially resulting in loss of confidentiality.",
|
||||
"supportingMedia": [
|
||||
{
|
||||
"base64": false,
|
||||
"type": "text/html",
|
||||
"value": "Use of a per-part static key in the ASP Bootloader could allow an attacker to downgrade the Secure Encrypted Virtualization (SEV) firmware and exploit known vulnerabilities to decrypt memory potentially resulting in loss of confidentiality.<br>"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"cweId": "CWE-321",
|
||||
"description": "CWE-321 Use of Hard-coded Cryptographic Key",
|
||||
"lang": "en",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-3038.html"
|
||||
}
|
||||
],
|
||||
"source": {
|
||||
"discovery": "UNKNOWN"
|
||||
},
|
||||
"x_generator": {
|
||||
"engine": "AMD PSIRT Automation 1.0"
|
||||
},
|
||||
"metrics": [
|
||||
{
|
||||
"cvssV4_0": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:H/SI:N/SA:N",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "NONE",
|
||||
"privilegesRequired": "HIGH",
|
||||
"userInteraction": "NONE",
|
||||
"vulnConfidentialityImpact": "LOW",
|
||||
"vulnIntegrityImpact": "NONE",
|
||||
"vulnAvailabilityImpact": "NONE",
|
||||
"subConfidentialityImpact": "HIGH",
|
||||
"subIntegrityImpact": "NONE",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"baseScore": 5.9,
|
||||
"baseSeverity": "MEDIUM"
|
||||
},
|
||||
"format": "CVSS",
|
||||
"scenarios": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "GENERAL"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,122 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-0435",
|
||||
"assignerOrgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "AMD",
|
||||
"dateReserved": "2025-12-06T13:53:49.753Z",
|
||||
"datePublished": "2026-11-10T22:12:26.763Z",
|
||||
"dateUpdated": "2026-11-10T22:12:26.763Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
|
||||
"shortName": "AMD",
|
||||
"dateUpdated": "2026-11-10T22:12:26.763Z"
|
||||
},
|
||||
"affected": [
|
||||
{
|
||||
"defaultStatus": "affected",
|
||||
"vendor": "AMD",
|
||||
"product": "AMD EPYC™ 9005 Series Processors",
|
||||
"versions": [
|
||||
{
|
||||
"version": "TurinPI_1.0.0.B",
|
||||
"status": "unaffected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"defaultStatus": "affected",
|
||||
"vendor": "AMD",
|
||||
"product": "AMD EPYC™ 8005 Series Processors",
|
||||
"versions": [
|
||||
{
|
||||
"version": "TurinPI_1.0.0.B",
|
||||
"status": "unaffected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"defaultStatus": "affected",
|
||||
"vendor": "AMD",
|
||||
"product": "AMD EPYC™ Embedded 9005 Series Processors",
|
||||
"versions": [
|
||||
{
|
||||
"version": "EmbeddedTurinPI_SP5_1005",
|
||||
"status": "unaffected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"datePublic": "2026-11-10T22:09:01.940Z",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Operation on a resource after expiration or release in the AMD Secure Encrypted Virtualization (SEV) firmware could allow an attacker with administrative privileges to swap out a guest device without the guest's knowledge, potentially resulting in a loss of confidentiality and integrity.",
|
||||
"supportingMedia": [
|
||||
{
|
||||
"base64": false,
|
||||
"type": "text/html",
|
||||
"value": "Operation on a resource after expiration or release in the AMD Secure Encrypted Virtualization (SEV) firmware could allow an attacker with administrative privileges to swap out a guest device without the guest's knowledge, potentially resulting in a loss of confidentiality and integrity.<br>"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"cweId": "CWE-672",
|
||||
"description": "CWE-672 Operation on a Resource after Expiration or Release",
|
||||
"lang": "en",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-3038.html"
|
||||
}
|
||||
],
|
||||
"source": {
|
||||
"discovery": "UNKNOWN"
|
||||
},
|
||||
"x_generator": {
|
||||
"engine": "AMD PSIRT Automation 1.0"
|
||||
},
|
||||
"metrics": [
|
||||
{
|
||||
"cvssV4_0": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "NONE",
|
||||
"privilegesRequired": "HIGH",
|
||||
"userInteraction": "NONE",
|
||||
"vulnConfidentialityImpact": "NONE",
|
||||
"vulnIntegrityImpact": "NONE",
|
||||
"vulnAvailabilityImpact": "NONE",
|
||||
"subConfidentialityImpact": "HIGH",
|
||||
"subIntegrityImpact": "HIGH",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"baseScore": 6,
|
||||
"baseSeverity": "MEDIUM"
|
||||
},
|
||||
"format": "CVSS",
|
||||
"scenarios": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "GENERAL"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,122 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-0454",
|
||||
"assignerOrgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "AMD",
|
||||
"dateReserved": "2025-12-06T13:53:59.350Z",
|
||||
"datePublished": "2026-11-10T22:12:15.842Z",
|
||||
"dateUpdated": "2026-11-10T22:12:15.842Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
|
||||
"shortName": "AMD",
|
||||
"dateUpdated": "2026-11-10T22:12:15.842Z"
|
||||
},
|
||||
"affected": [
|
||||
{
|
||||
"defaultStatus": "affected",
|
||||
"vendor": "AMD",
|
||||
"product": "AMD EPYC™ 9005 Series Processors",
|
||||
"versions": [
|
||||
{
|
||||
"version": "TurinPI_1.0.0.B",
|
||||
"status": "unaffected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"defaultStatus": "affected",
|
||||
"vendor": "AMD",
|
||||
"product": "AMD EPYC™ 8005 Series Processors",
|
||||
"versions": [
|
||||
{
|
||||
"version": "TurinPI_1.0.0.B",
|
||||
"status": "unaffected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"defaultStatus": "affected",
|
||||
"vendor": "AMD",
|
||||
"product": "AMD EPYC™ Embedded 9005 Series Processors",
|
||||
"versions": [
|
||||
{
|
||||
"version": "EmbeddedTurinPI_SP5_1005",
|
||||
"status": "unaffected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"datePublic": "2026-11-10T22:08:55.704Z",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "An out-of-bounds write in the AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to corrupt global firmware variables, potentially resulting in loss of integrity.",
|
||||
"supportingMedia": [
|
||||
{
|
||||
"base64": false,
|
||||
"type": "text/html",
|
||||
"value": "An out-of-bounds write in the AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to corrupt global firmware variables, potentially resulting in loss of integrity.<br>"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"cweId": "CWE-787",
|
||||
"description": "CWE-787 Out-of-bounds Write",
|
||||
"lang": "en",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-3038.html"
|
||||
}
|
||||
],
|
||||
"source": {
|
||||
"discovery": "UNKNOWN"
|
||||
},
|
||||
"x_generator": {
|
||||
"engine": "AMD PSIRT Automation 1.0"
|
||||
},
|
||||
"metrics": [
|
||||
{
|
||||
"cvssV4_0": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "NONE",
|
||||
"privilegesRequired": "HIGH",
|
||||
"userInteraction": "NONE",
|
||||
"vulnConfidentialityImpact": "NONE",
|
||||
"vulnIntegrityImpact": "LOW",
|
||||
"vulnAvailabilityImpact": "NONE",
|
||||
"subConfidentialityImpact": "NONE",
|
||||
"subIntegrityImpact": "NONE",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"baseScore": 4.6,
|
||||
"baseSeverity": "MEDIUM"
|
||||
},
|
||||
"format": "CVSS",
|
||||
"scenarios": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "GENERAL"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,122 @@
|
||||
{
|
||||
"dataType": "CVE_RECORD",
|
||||
"dataVersion": "5.2",
|
||||
"cveMetadata": {
|
||||
"cveId": "CVE-2026-0480",
|
||||
"assignerOrgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
|
||||
"state": "PUBLISHED",
|
||||
"assignerShortName": "AMD",
|
||||
"dateReserved": "2025-12-06T15:11:32.982Z",
|
||||
"datePublished": "2026-11-10T22:12:04.455Z",
|
||||
"dateUpdated": "2026-11-10T22:12:04.455Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
"providerMetadata": {
|
||||
"orgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
|
||||
"shortName": "AMD",
|
||||
"dateUpdated": "2026-11-10T22:12:04.455Z"
|
||||
},
|
||||
"affected": [
|
||||
{
|
||||
"defaultStatus": "affected",
|
||||
"vendor": "AMD",
|
||||
"product": "AMD EPYC™ 9005 Series Processors",
|
||||
"versions": [
|
||||
{
|
||||
"version": "TurinPI_1.0.0.B",
|
||||
"status": "unaffected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"defaultStatus": "affected",
|
||||
"vendor": "AMD",
|
||||
"product": "AMD EPYC™ 8005 Series Processors",
|
||||
"versions": [
|
||||
{
|
||||
"version": "TurinPI_1.0.0.B",
|
||||
"status": "unaffected"
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"defaultStatus": "affected",
|
||||
"vendor": "AMD",
|
||||
"product": "AMD EPYC™ Embedded 9005 Series Processors",
|
||||
"versions": [
|
||||
{
|
||||
"version": "EmbeddedTurinPI_SP5_1005",
|
||||
"status": "unaffected"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"datePublic": "2026-11-10T22:08:49.088Z",
|
||||
"descriptions": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "Missing Authentication for Critical Function in AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to forge SEV-TIO guest request messages potentially compromising SEV-SNP guest memory integrity and confidentiality.",
|
||||
"supportingMedia": [
|
||||
{
|
||||
"base64": false,
|
||||
"type": "text/html",
|
||||
"value": "Missing Authentication for Critical Function in AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to forge SEV-TIO guest request messages potentially compromising SEV-SNP guest memory integrity and confidentiality.<br>"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"problemTypes": [
|
||||
{
|
||||
"descriptions": [
|
||||
{
|
||||
"cweId": "CWE-306",
|
||||
"description": "CWE-306 Missing Authentication for Critical Function",
|
||||
"lang": "en",
|
||||
"type": "CWE"
|
||||
}
|
||||
]
|
||||
}
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"url": "https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-3038.html"
|
||||
}
|
||||
],
|
||||
"source": {
|
||||
"discovery": "UNKNOWN"
|
||||
},
|
||||
"x_generator": {
|
||||
"engine": "AMD PSIRT Automation 1.0"
|
||||
},
|
||||
"metrics": [
|
||||
{
|
||||
"cvssV4_0": {
|
||||
"version": "4.0",
|
||||
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N",
|
||||
"attackVector": "LOCAL",
|
||||
"attackComplexity": "LOW",
|
||||
"attackRequirements": "NONE",
|
||||
"privilegesRequired": "HIGH",
|
||||
"userInteraction": "NONE",
|
||||
"vulnConfidentialityImpact": "NONE",
|
||||
"vulnIntegrityImpact": "NONE",
|
||||
"vulnAvailabilityImpact": "NONE",
|
||||
"subConfidentialityImpact": "HIGH",
|
||||
"subIntegrityImpact": "HIGH",
|
||||
"subAvailabilityImpact": "NONE",
|
||||
"baseScore": 6,
|
||||
"baseSeverity": "MEDIUM"
|
||||
},
|
||||
"format": "CVSS",
|
||||
"scenarios": [
|
||||
{
|
||||
"lang": "en",
|
||||
"value": "GENERAL"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-25T15:11:44.538Z",
|
||||
"datePublished": "2026-10-13T19:01:29.910Z",
|
||||
"dateUpdated": "2026-10-31T18:12:05.995Z"
|
||||
"dateUpdated": "2026-11-10T20:45:46.037Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -221,7 +221,7 @@
|
||||
"providerMetadata": {
|
||||
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
|
||||
"shortName": "microsoft",
|
||||
"dateUpdated": "2026-10-31T18:12:05.995Z"
|
||||
"dateUpdated": "2026-11-10T20:45:46.037Z"
|
||||
},
|
||||
"references": [
|
||||
{
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-25T15:11:44.539Z",
|
||||
"datePublished": "2026-10-13T19:01:29.987Z",
|
||||
"dateUpdated": "2026-10-31T18:12:06.537Z"
|
||||
"dateUpdated": "2026-11-10T20:45:46.614Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -358,7 +358,7 @@
|
||||
"providerMetadata": {
|
||||
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
|
||||
"shortName": "microsoft",
|
||||
"dateUpdated": "2026-10-31T18:12:06.537Z"
|
||||
"dateUpdated": "2026-11-10T20:45:46.614Z"
|
||||
},
|
||||
"references": [
|
||||
{
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-25T15:11:44.539Z",
|
||||
"datePublished": "2026-10-13T19:01:30.060Z",
|
||||
"dateUpdated": "2026-10-31T18:12:07.181Z"
|
||||
"dateUpdated": "2026-11-10T20:45:47.126Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -500,7 +500,7 @@
|
||||
"providerMetadata": {
|
||||
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
|
||||
"shortName": "microsoft",
|
||||
"dateUpdated": "2026-10-31T18:12:07.181Z"
|
||||
"dateUpdated": "2026-11-10T20:45:47.126Z"
|
||||
},
|
||||
"references": [
|
||||
{
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-25T15:11:44.539Z",
|
||||
"datePublished": "2026-10-13T19:01:30.154Z",
|
||||
"dateUpdated": "2026-10-31T18:12:07.729Z"
|
||||
"dateUpdated": "2026-11-10T20:45:47.734Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -416,7 +416,7 @@
|
||||
"providerMetadata": {
|
||||
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
|
||||
"shortName": "microsoft",
|
||||
"dateUpdated": "2026-10-31T18:12:07.729Z"
|
||||
"dateUpdated": "2026-11-10T20:45:47.734Z"
|
||||
},
|
||||
"references": [
|
||||
{
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-25T15:11:44.539Z",
|
||||
"datePublished": "2026-11-10T18:15:06.246Z",
|
||||
"dateUpdated": "2026-11-10T19:35:12.572Z"
|
||||
"dateUpdated": "2026-11-10T21:21:37.047Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -106,6 +106,40 @@
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"id": "CVE-2026-100204",
|
||||
"role": "CISA Coordinator",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"version": "2.0.3",
|
||||
"timestamp": "2026-11-10T21:19:32.295304Z"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-10T21:21:37.047Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-25T15:11:44.539Z",
|
||||
"datePublished": "2026-10-13T19:01:30.233Z",
|
||||
"dateUpdated": "2026-10-31T18:12:08.246Z"
|
||||
"dateUpdated": "2026-11-10T20:45:48.173Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -67,7 +67,7 @@
|
||||
"providerMetadata": {
|
||||
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
|
||||
"shortName": "microsoft",
|
||||
"dateUpdated": "2026-10-31T18:12:08.246Z"
|
||||
"dateUpdated": "2026-11-10T20:45:48.173Z"
|
||||
},
|
||||
"references": [
|
||||
{
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-25T15:11:44.539Z",
|
||||
"datePublished": "2026-10-13T19:01:30.281Z",
|
||||
"dateUpdated": "2026-10-31T18:12:08.751Z"
|
||||
"dateUpdated": "2026-11-10T20:45:48.618Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -67,7 +67,7 @@
|
||||
"providerMetadata": {
|
||||
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
|
||||
"shortName": "microsoft",
|
||||
"dateUpdated": "2026-10-31T18:12:08.751Z"
|
||||
"dateUpdated": "2026-11-10T20:45:48.618Z"
|
||||
},
|
||||
"references": [
|
||||
{
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-25T15:11:44.539Z",
|
||||
"datePublished": "2026-09-25T19:39:27.315Z",
|
||||
"dateUpdated": "2026-10-30T17:23:06.582Z"
|
||||
"dateUpdated": "2026-11-10T21:38:39.737Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -121,7 +121,7 @@
|
||||
"providerMetadata": {
|
||||
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
|
||||
"shortName": "microsoft",
|
||||
"dateUpdated": "2026-10-30T17:23:06.582Z"
|
||||
"dateUpdated": "2026-11-10T21:38:39.737Z"
|
||||
},
|
||||
"references": [
|
||||
{
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-25T15:11:44.539Z",
|
||||
"datePublished": "2026-10-13T19:01:30.470Z",
|
||||
"dateUpdated": "2026-10-31T18:12:09.795Z"
|
||||
"dateUpdated": "2026-11-10T20:45:49.765Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -147,7 +147,7 @@
|
||||
"providerMetadata": {
|
||||
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
|
||||
"shortName": "microsoft",
|
||||
"dateUpdated": "2026-10-31T18:12:09.795Z"
|
||||
"dateUpdated": "2026-11-10T20:45:49.765Z"
|
||||
},
|
||||
"references": [
|
||||
{
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-25T15:11:44.540Z",
|
||||
"datePublished": "2026-10-13T19:01:30.547Z",
|
||||
"dateUpdated": "2026-10-31T18:12:10.303Z"
|
||||
"dateUpdated": "2026-11-10T20:45:50.337Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -187,7 +187,7 @@
|
||||
"providerMetadata": {
|
||||
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
|
||||
"shortName": "microsoft",
|
||||
"dateUpdated": "2026-10-31T18:12:10.303Z"
|
||||
"dateUpdated": "2026-11-10T20:45:50.337Z"
|
||||
},
|
||||
"references": [
|
||||
{
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-25T15:11:44.540Z",
|
||||
"datePublished": "2026-10-13T19:01:30.394Z",
|
||||
"dateUpdated": "2026-10-31T18:12:09.287Z"
|
||||
"dateUpdated": "2026-11-10T20:45:49.256Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -147,7 +147,7 @@
|
||||
"providerMetadata": {
|
||||
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
|
||||
"shortName": "microsoft",
|
||||
"dateUpdated": "2026-10-31T18:12:09.287Z"
|
||||
"dateUpdated": "2026-11-10T20:45:49.256Z"
|
||||
},
|
||||
"references": [
|
||||
{
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-25T15:11:44.540Z",
|
||||
"datePublished": "2026-10-13T19:01:30.621Z",
|
||||
"dateUpdated": "2026-10-31T18:12:10.802Z"
|
||||
"dateUpdated": "2026-11-10T20:45:50.996Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -187,7 +187,7 @@
|
||||
"providerMetadata": {
|
||||
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
|
||||
"shortName": "microsoft",
|
||||
"dateUpdated": "2026-10-31T18:12:10.802Z"
|
||||
"dateUpdated": "2026-11-10T20:45:50.996Z"
|
||||
},
|
||||
"references": [
|
||||
{
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-25T15:11:44.540Z",
|
||||
"datePublished": "2026-10-13T19:01:31.105Z",
|
||||
"dateUpdated": "2026-10-31T18:12:13.665Z"
|
||||
"dateUpdated": "2026-11-10T20:45:54.221Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -91,7 +91,7 @@
|
||||
"providerMetadata": {
|
||||
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
|
||||
"shortName": "microsoft",
|
||||
"dateUpdated": "2026-10-31T18:12:13.665Z"
|
||||
"dateUpdated": "2026-11-10T20:45:54.221Z"
|
||||
},
|
||||
"references": [
|
||||
{
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-25T15:11:44.540Z",
|
||||
"datePublished": "2026-10-13T19:01:35.098Z",
|
||||
"dateUpdated": "2026-10-31T18:12:37.375Z"
|
||||
"dateUpdated": "2026-11-10T20:46:23.450Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -458,7 +458,7 @@
|
||||
"providerMetadata": {
|
||||
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
|
||||
"shortName": "microsoft",
|
||||
"dateUpdated": "2026-10-31T18:12:37.375Z"
|
||||
"dateUpdated": "2026-11-10T20:46:23.450Z"
|
||||
},
|
||||
"references": [
|
||||
{
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-25T15:11:44.540Z",
|
||||
"datePublished": "2026-10-13T19:01:31.186Z",
|
||||
"dateUpdated": "2026-10-31T18:12:14.176Z"
|
||||
"dateUpdated": "2026-11-10T20:45:54.757Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -352,7 +352,7 @@
|
||||
"providerMetadata": {
|
||||
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
|
||||
"shortName": "microsoft",
|
||||
"dateUpdated": "2026-10-31T18:12:14.176Z"
|
||||
"dateUpdated": "2026-11-10T20:45:54.757Z"
|
||||
},
|
||||
"references": [
|
||||
{
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-25T15:11:44.540Z",
|
||||
"datePublished": "2026-10-13T19:01:31.280Z",
|
||||
"dateUpdated": "2026-10-31T18:12:14.753Z"
|
||||
"dateUpdated": "2026-11-10T20:45:55.216Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -458,7 +458,7 @@
|
||||
"providerMetadata": {
|
||||
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
|
||||
"shortName": "microsoft",
|
||||
"dateUpdated": "2026-10-31T18:12:14.753Z"
|
||||
"dateUpdated": "2026-11-10T20:45:55.216Z"
|
||||
},
|
||||
"references": [
|
||||
{
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-25T15:11:44.540Z",
|
||||
"datePublished": "2026-10-13T19:01:31.381Z",
|
||||
"dateUpdated": "2026-10-31T18:12:15.193Z"
|
||||
"dateUpdated": "2026-11-10T20:45:55.810Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -478,7 +478,7 @@
|
||||
"providerMetadata": {
|
||||
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
|
||||
"shortName": "microsoft",
|
||||
"dateUpdated": "2026-10-31T18:12:15.193Z"
|
||||
"dateUpdated": "2026-11-10T20:45:55.810Z"
|
||||
},
|
||||
"references": [
|
||||
{
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-25T15:11:44.540Z",
|
||||
"datePublished": "2026-10-13T19:01:31.456Z",
|
||||
"dateUpdated": "2026-11-04T00:17:07.276Z"
|
||||
"dateUpdated": "2026-11-10T20:45:58.962Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -242,7 +242,7 @@
|
||||
"providerMetadata": {
|
||||
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
|
||||
"shortName": "microsoft",
|
||||
"dateUpdated": "2026-10-31T18:12:15.709Z"
|
||||
"dateUpdated": "2026-11-10T20:45:58.962Z"
|
||||
},
|
||||
"references": [
|
||||
{
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-25T15:11:44.541Z",
|
||||
"datePublished": "2026-10-13T19:01:31.559Z",
|
||||
"dateUpdated": "2026-10-31T18:12:16.388Z"
|
||||
"dateUpdated": "2026-11-10T20:46:00.075Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -500,7 +500,7 @@
|
||||
"providerMetadata": {
|
||||
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
|
||||
"shortName": "microsoft",
|
||||
"dateUpdated": "2026-10-31T18:12:16.388Z"
|
||||
"dateUpdated": "2026-11-10T20:46:00.075Z"
|
||||
},
|
||||
"references": [
|
||||
{
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-25T15:11:44.541Z",
|
||||
"datePublished": "2026-10-13T19:01:31.812Z",
|
||||
"dateUpdated": "2026-10-31T18:12:17.955Z"
|
||||
"dateUpdated": "2026-11-10T20:46:02.172Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -506,7 +506,7 @@
|
||||
"providerMetadata": {
|
||||
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
|
||||
"shortName": "microsoft",
|
||||
"dateUpdated": "2026-10-31T18:12:17.955Z"
|
||||
"dateUpdated": "2026-11-10T20:46:02.172Z"
|
||||
},
|
||||
"references": [
|
||||
{
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-25T15:11:44.541Z",
|
||||
"datePublished": "2026-11-10T18:15:26.361Z",
|
||||
"dateUpdated": "2026-11-10T19:35:32.599Z"
|
||||
"dateUpdated": "2026-11-10T21:21:36.725Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -445,6 +445,40 @@
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"id": "CVE-2026-100223",
|
||||
"role": "CISA Coordinator",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"version": "2.0.3",
|
||||
"timestamp": "2026-11-10T21:19:21.016117Z"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-10T21:21:36.725Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-25T15:11:44.541Z",
|
||||
"datePublished": "2026-10-13T19:01:31.922Z",
|
||||
"dateUpdated": "2026-10-31T18:12:18.463Z"
|
||||
"dateUpdated": "2026-11-10T20:46:03.132Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -500,7 +500,7 @@
|
||||
"providerMetadata": {
|
||||
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
|
||||
"shortName": "microsoft",
|
||||
"dateUpdated": "2026-10-31T18:12:18.463Z"
|
||||
"dateUpdated": "2026-11-10T20:46:03.132Z"
|
||||
},
|
||||
"references": [
|
||||
{
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-28T18:20:51.762Z",
|
||||
"datePublished": "2026-10-13T19:01:32.382Z",
|
||||
"dateUpdated": "2026-10-31T18:12:21.710Z"
|
||||
"dateUpdated": "2026-11-10T20:46:06.742Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -500,7 +500,7 @@
|
||||
"providerMetadata": {
|
||||
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
|
||||
"shortName": "microsoft",
|
||||
"dateUpdated": "2026-10-31T18:12:21.710Z"
|
||||
"dateUpdated": "2026-11-10T20:46:06.742Z"
|
||||
},
|
||||
"references": [
|
||||
{
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-28T18:20:51.762Z",
|
||||
"datePublished": "2026-10-13T19:01:32.340Z",
|
||||
"dateUpdated": "2026-10-31T18:12:21.203Z"
|
||||
"dateUpdated": "2026-11-10T20:46:06.201Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -500,7 +500,7 @@
|
||||
"providerMetadata": {
|
||||
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
|
||||
"shortName": "microsoft",
|
||||
"dateUpdated": "2026-10-31T18:12:21.203Z"
|
||||
"dateUpdated": "2026-11-10T20:46:06.201Z"
|
||||
},
|
||||
"references": [
|
||||
{
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-28T18:20:51.762Z",
|
||||
"datePublished": "2026-10-13T19:01:32.491Z",
|
||||
"dateUpdated": "2026-10-31T18:12:22.147Z"
|
||||
"dateUpdated": "2026-11-10T20:46:07.320Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -500,7 +500,7 @@
|
||||
"providerMetadata": {
|
||||
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
|
||||
"shortName": "microsoft",
|
||||
"dateUpdated": "2026-10-31T18:12:22.147Z"
|
||||
"dateUpdated": "2026-11-10T20:46:07.320Z"
|
||||
},
|
||||
"references": [
|
||||
{
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-28T18:20:51.762Z",
|
||||
"datePublished": "2026-10-13T19:01:32.844Z",
|
||||
"dateUpdated": "2026-10-31T18:12:22.735Z"
|
||||
"dateUpdated": "2026-11-10T20:46:07.903Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -242,7 +242,7 @@
|
||||
"providerMetadata": {
|
||||
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
|
||||
"shortName": "microsoft",
|
||||
"dateUpdated": "2026-10-31T18:12:22.735Z"
|
||||
"dateUpdated": "2026-11-10T20:46:07.903Z"
|
||||
},
|
||||
"references": [
|
||||
{
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-28T18:20:51.762Z",
|
||||
"datePublished": "2026-10-13T19:01:32.954Z",
|
||||
"dateUpdated": "2026-10-31T18:12:23.238Z"
|
||||
"dateUpdated": "2026-11-10T20:46:09.190Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -242,7 +242,7 @@
|
||||
"providerMetadata": {
|
||||
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
|
||||
"shortName": "microsoft",
|
||||
"dateUpdated": "2026-10-31T18:12:23.238Z"
|
||||
"dateUpdated": "2026-11-10T20:46:09.190Z"
|
||||
},
|
||||
"references": [
|
||||
{
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-28T18:20:51.762Z",
|
||||
"datePublished": "2026-10-13T19:01:33.022Z",
|
||||
"dateUpdated": "2026-10-31T18:12:23.816Z"
|
||||
"dateUpdated": "2026-11-10T20:46:09.803Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -154,7 +154,7 @@
|
||||
"providerMetadata": {
|
||||
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
|
||||
"shortName": "microsoft",
|
||||
"dateUpdated": "2026-10-31T18:12:23.816Z"
|
||||
"dateUpdated": "2026-11-10T20:46:09.803Z"
|
||||
},
|
||||
"references": [
|
||||
{
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-28T18:20:51.762Z",
|
||||
"datePublished": "2026-10-13T19:01:33.094Z",
|
||||
"dateUpdated": "2026-10-31T18:12:24.376Z"
|
||||
"dateUpdated": "2026-11-10T20:46:10.341Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -247,7 +247,7 @@
|
||||
"providerMetadata": {
|
||||
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
|
||||
"shortName": "microsoft",
|
||||
"dateUpdated": "2026-10-31T18:12:24.376Z"
|
||||
"dateUpdated": "2026-11-10T20:46:10.341Z"
|
||||
},
|
||||
"references": [
|
||||
{
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-28T18:20:51.762Z",
|
||||
"datePublished": "2026-10-13T19:01:33.174Z",
|
||||
"dateUpdated": "2026-10-31T18:12:24.962Z"
|
||||
"dateUpdated": "2026-11-10T20:46:10.936Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -500,7 +500,7 @@
|
||||
"providerMetadata": {
|
||||
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
|
||||
"shortName": "microsoft",
|
||||
"dateUpdated": "2026-10-31T18:12:24.962Z"
|
||||
"dateUpdated": "2026-11-10T20:46:10.936Z"
|
||||
},
|
||||
"references": [
|
||||
{
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-28T18:20:51.762Z",
|
||||
"datePublished": "2026-10-13T19:01:33.240Z",
|
||||
"dateUpdated": "2026-10-31T18:12:25.498Z"
|
||||
"dateUpdated": "2026-11-10T20:46:11.518Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -179,7 +179,7 @@
|
||||
"providerMetadata": {
|
||||
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
|
||||
"shortName": "microsoft",
|
||||
"dateUpdated": "2026-10-31T18:12:25.498Z"
|
||||
"dateUpdated": "2026-11-10T20:46:11.518Z"
|
||||
},
|
||||
"references": [
|
||||
{
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-28T18:20:51.762Z",
|
||||
"datePublished": "2026-10-13T19:01:33.355Z",
|
||||
"dateUpdated": "2026-10-31T18:12:26.076Z"
|
||||
"dateUpdated": "2026-11-10T20:46:12.066Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -289,7 +289,7 @@
|
||||
"providerMetadata": {
|
||||
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
|
||||
"shortName": "microsoft",
|
||||
"dateUpdated": "2026-10-31T18:12:26.076Z"
|
||||
"dateUpdated": "2026-11-10T20:46:12.066Z"
|
||||
},
|
||||
"references": [
|
||||
{
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-28T18:20:51.762Z",
|
||||
"datePublished": "2026-10-13T19:01:33.415Z",
|
||||
"dateUpdated": "2026-10-31T18:12:26.511Z"
|
||||
"dateUpdated": "2026-11-10T20:46:12.520Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -289,7 +289,7 @@
|
||||
"providerMetadata": {
|
||||
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
|
||||
"shortName": "microsoft",
|
||||
"dateUpdated": "2026-10-31T18:12:26.511Z"
|
||||
"dateUpdated": "2026-11-10T20:46:12.520Z"
|
||||
},
|
||||
"references": [
|
||||
{
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-28T18:20:51.763Z",
|
||||
"datePublished": "2026-10-13T19:01:33.498Z",
|
||||
"dateUpdated": "2026-10-31T18:12:27.014Z"
|
||||
"dateUpdated": "2026-11-10T20:46:13.051Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -500,7 +500,7 @@
|
||||
"providerMetadata": {
|
||||
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
|
||||
"shortName": "microsoft",
|
||||
"dateUpdated": "2026-10-31T18:12:27.014Z"
|
||||
"dateUpdated": "2026-11-10T20:46:13.051Z"
|
||||
},
|
||||
"references": [
|
||||
{
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-28T18:20:51.763Z",
|
||||
"datePublished": "2026-10-13T19:01:33.571Z",
|
||||
"dateUpdated": "2026-10-31T18:12:27.524Z"
|
||||
"dateUpdated": "2026-11-10T20:46:13.642Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -500,7 +500,7 @@
|
||||
"providerMetadata": {
|
||||
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
|
||||
"shortName": "microsoft",
|
||||
"dateUpdated": "2026-10-31T18:12:27.524Z"
|
||||
"dateUpdated": "2026-11-10T20:46:13.642Z"
|
||||
},
|
||||
"references": [
|
||||
{
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-28T18:20:51.763Z",
|
||||
"datePublished": "2026-11-10T18:15:26.957Z",
|
||||
"dateUpdated": "2026-11-10T19:35:33.067Z"
|
||||
"dateUpdated": "2026-11-10T21:21:36.242Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -381,6 +381,40 @@
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"id": "CVE-2026-102200",
|
||||
"role": "CISA Coordinator",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "partial"
|
||||
}
|
||||
],
|
||||
"version": "2.0.3",
|
||||
"timestamp": "2026-11-10T21:19:08.612602Z"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-10T21:21:36.242Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-28T18:20:51.763Z",
|
||||
"datePublished": "2026-10-13T19:01:33.659Z",
|
||||
"dateUpdated": "2026-10-31T18:12:28.039Z"
|
||||
"dateUpdated": "2026-11-10T20:46:14.157Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -289,7 +289,7 @@
|
||||
"providerMetadata": {
|
||||
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
|
||||
"shortName": "microsoft",
|
||||
"dateUpdated": "2026-10-31T18:12:28.039Z"
|
||||
"dateUpdated": "2026-11-10T20:46:14.157Z"
|
||||
},
|
||||
"references": [
|
||||
{
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-28T18:20:51.763Z",
|
||||
"datePublished": "2026-10-13T19:01:33.819Z",
|
||||
"dateUpdated": "2026-10-31T18:12:29.119Z"
|
||||
"dateUpdated": "2026-11-10T20:46:15.196Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -242,7 +242,7 @@
|
||||
"providerMetadata": {
|
||||
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
|
||||
"shortName": "microsoft",
|
||||
"dateUpdated": "2026-10-31T18:12:29.119Z"
|
||||
"dateUpdated": "2026-11-10T20:46:15.196Z"
|
||||
},
|
||||
"references": [
|
||||
{
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-28T18:20:51.763Z",
|
||||
"datePublished": "2026-10-13T19:01:33.716Z",
|
||||
"dateUpdated": "2026-10-31T18:12:28.546Z"
|
||||
"dateUpdated": "2026-11-10T20:46:14.690Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -500,7 +500,7 @@
|
||||
"providerMetadata": {
|
||||
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
|
||||
"shortName": "microsoft",
|
||||
"dateUpdated": "2026-10-31T18:12:28.546Z"
|
||||
"dateUpdated": "2026-11-10T20:46:14.690Z"
|
||||
},
|
||||
"references": [
|
||||
{
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-28T18:20:51.763Z",
|
||||
"datePublished": "2026-10-13T19:01:33.895Z",
|
||||
"dateUpdated": "2026-10-31T18:12:29.633Z"
|
||||
"dateUpdated": "2026-11-10T20:46:15.696Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -67,7 +67,7 @@
|
||||
"providerMetadata": {
|
||||
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
|
||||
"shortName": "microsoft",
|
||||
"dateUpdated": "2026-10-31T18:12:29.633Z"
|
||||
"dateUpdated": "2026-11-10T20:46:15.696Z"
|
||||
},
|
||||
"references": [
|
||||
{
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-28T18:20:51.763Z",
|
||||
"datePublished": "2026-10-13T19:01:34.060Z",
|
||||
"dateUpdated": "2026-10-31T18:12:30.731Z"
|
||||
"dateUpdated": "2026-11-10T20:46:16.641Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -500,7 +500,7 @@
|
||||
"providerMetadata": {
|
||||
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
|
||||
"shortName": "microsoft",
|
||||
"dateUpdated": "2026-10-31T18:12:30.731Z"
|
||||
"dateUpdated": "2026-11-10T20:46:16.641Z"
|
||||
},
|
||||
"references": [
|
||||
{
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-28T18:20:51.763Z",
|
||||
"datePublished": "2026-10-13T19:01:33.979Z",
|
||||
"dateUpdated": "2026-10-31T18:12:30.142Z"
|
||||
"dateUpdated": "2026-11-10T20:46:16.206Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -500,7 +500,7 @@
|
||||
"providerMetadata": {
|
||||
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
|
||||
"shortName": "microsoft",
|
||||
"dateUpdated": "2026-10-31T18:12:30.142Z"
|
||||
"dateUpdated": "2026-11-10T20:46:16.206Z"
|
||||
},
|
||||
"references": [
|
||||
{
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-28T18:20:51.763Z",
|
||||
"datePublished": "2026-10-13T19:01:34.108Z",
|
||||
"dateUpdated": "2026-10-31T18:12:31.324Z"
|
||||
"dateUpdated": "2026-11-10T20:46:17.178Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -416,7 +416,7 @@
|
||||
"providerMetadata": {
|
||||
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
|
||||
"shortName": "microsoft",
|
||||
"dateUpdated": "2026-10-31T18:12:31.324Z"
|
||||
"dateUpdated": "2026-11-10T20:46:17.178Z"
|
||||
},
|
||||
"references": [
|
||||
{
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-28T18:20:51.763Z",
|
||||
"datePublished": "2026-10-13T19:01:34.187Z",
|
||||
"dateUpdated": "2026-10-31T18:12:31.832Z"
|
||||
"dateUpdated": "2026-11-10T20:46:17.655Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -370,7 +370,7 @@
|
||||
"providerMetadata": {
|
||||
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
|
||||
"shortName": "microsoft",
|
||||
"dateUpdated": "2026-10-31T18:12:31.832Z"
|
||||
"dateUpdated": "2026-11-10T20:46:17.655Z"
|
||||
},
|
||||
"references": [
|
||||
{
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-28T18:20:51.763Z",
|
||||
"datePublished": "2026-10-13T19:01:34.268Z",
|
||||
"dateUpdated": "2026-10-31T18:12:32.336Z"
|
||||
"dateUpdated": "2026-11-10T20:46:18.239Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -71,7 +71,7 @@
|
||||
"providerMetadata": {
|
||||
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
|
||||
"shortName": "microsoft",
|
||||
"dateUpdated": "2026-10-31T18:12:32.336Z"
|
||||
"dateUpdated": "2026-11-10T20:46:18.239Z"
|
||||
},
|
||||
"references": [
|
||||
{
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-28T18:20:51.763Z",
|
||||
"datePublished": "2026-10-13T19:01:34.342Z",
|
||||
"dateUpdated": "2026-10-31T18:12:32.845Z"
|
||||
"dateUpdated": "2026-11-10T20:46:18.748Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -352,7 +352,7 @@
|
||||
"providerMetadata": {
|
||||
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
|
||||
"shortName": "microsoft",
|
||||
"dateUpdated": "2026-10-31T18:12:32.845Z"
|
||||
"dateUpdated": "2026-11-10T20:46:18.748Z"
|
||||
},
|
||||
"references": [
|
||||
{
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-28T18:20:51.763Z",
|
||||
"datePublished": "2026-10-13T19:01:34.433Z",
|
||||
"dateUpdated": "2026-10-31T18:12:33.452Z"
|
||||
"dateUpdated": "2026-11-10T20:46:19.279Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -422,7 +422,7 @@
|
||||
"providerMetadata": {
|
||||
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
|
||||
"shortName": "microsoft",
|
||||
"dateUpdated": "2026-10-31T18:12:33.452Z"
|
||||
"dateUpdated": "2026-11-10T20:46:19.279Z"
|
||||
},
|
||||
"references": [
|
||||
{
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-28T18:28:18.684Z",
|
||||
"datePublished": "2026-10-13T19:01:34.944Z",
|
||||
"dateUpdated": "2026-10-31T18:12:36.423Z"
|
||||
"dateUpdated": "2026-11-10T20:46:22.410Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -416,7 +416,7 @@
|
||||
"providerMetadata": {
|
||||
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
|
||||
"shortName": "microsoft",
|
||||
"dateUpdated": "2026-10-31T18:12:36.423Z"
|
||||
"dateUpdated": "2026-11-10T20:46:22.410Z"
|
||||
},
|
||||
"references": [
|
||||
{
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-28T18:28:18.684Z",
|
||||
"datePublished": "2026-10-13T19:01:34.679Z",
|
||||
"dateUpdated": "2026-10-31T18:12:34.902Z"
|
||||
"dateUpdated": "2026-11-10T20:46:20.958Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -500,7 +500,7 @@
|
||||
"providerMetadata": {
|
||||
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
|
||||
"shortName": "microsoft",
|
||||
"dateUpdated": "2026-10-31T18:12:34.902Z"
|
||||
"dateUpdated": "2026-11-10T20:46:20.958Z"
|
||||
},
|
||||
"references": [
|
||||
{
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-28T18:28:18.684Z",
|
||||
"datePublished": "2026-10-13T19:01:34.517Z",
|
||||
"dateUpdated": "2026-10-31T18:12:33.962Z"
|
||||
"dateUpdated": "2026-11-10T20:46:19.906Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -500,7 +500,7 @@
|
||||
"providerMetadata": {
|
||||
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
|
||||
"shortName": "microsoft",
|
||||
"dateUpdated": "2026-10-31T18:12:33.962Z"
|
||||
"dateUpdated": "2026-11-10T20:46:19.906Z"
|
||||
},
|
||||
"references": [
|
||||
{
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-28T18:28:18.684Z",
|
||||
"datePublished": "2026-10-13T19:01:35.026Z",
|
||||
"dateUpdated": "2026-10-31T18:12:36.928Z"
|
||||
"dateUpdated": "2026-11-10T20:46:22.932Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -500,7 +500,7 @@
|
||||
"providerMetadata": {
|
||||
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
|
||||
"shortName": "microsoft",
|
||||
"dateUpdated": "2026-10-31T18:12:36.928Z"
|
||||
"dateUpdated": "2026-11-10T20:46:22.932Z"
|
||||
},
|
||||
"references": [
|
||||
{
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-28T18:28:18.685Z",
|
||||
"datePublished": "2026-10-13T19:01:34.599Z",
|
||||
"dateUpdated": "2026-10-31T18:12:34.464Z"
|
||||
"dateUpdated": "2026-11-10T20:46:20.437Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -500,7 +500,7 @@
|
||||
"providerMetadata": {
|
||||
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
|
||||
"shortName": "microsoft",
|
||||
"dateUpdated": "2026-10-31T18:12:34.464Z"
|
||||
"dateUpdated": "2026-11-10T20:46:20.437Z"
|
||||
},
|
||||
"references": [
|
||||
{
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-28T18:28:18.685Z",
|
||||
"datePublished": "2026-11-10T18:20:04.961Z",
|
||||
"dateUpdated": "2026-11-10T19:40:24.411Z"
|
||||
"dateUpdated": "2026-11-10T21:21:35.931Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -381,6 +381,40 @@
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"id": "CVE-2026-102219",
|
||||
"role": "CISA Coordinator",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"version": "2.0.3",
|
||||
"timestamp": "2026-11-10T21:18:56.817148Z"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-10T21:21:35.931Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-28T18:28:18.685Z",
|
||||
"datePublished": "2026-10-13T19:01:34.846Z",
|
||||
"dateUpdated": "2026-10-31T18:12:35.852Z"
|
||||
"dateUpdated": "2026-11-10T20:46:21.972Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -500,7 +500,7 @@
|
||||
"providerMetadata": {
|
||||
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
|
||||
"shortName": "microsoft",
|
||||
"dateUpdated": "2026-10-31T18:12:35.852Z"
|
||||
"dateUpdated": "2026-11-10T20:46:21.972Z"
|
||||
},
|
||||
"references": [
|
||||
{
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-28T18:28:18.685Z",
|
||||
"datePublished": "2026-10-13T19:01:34.765Z",
|
||||
"dateUpdated": "2026-10-31T18:12:35.411Z"
|
||||
"dateUpdated": "2026-11-10T20:46:21.467Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -416,7 +416,7 @@
|
||||
"providerMetadata": {
|
||||
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
|
||||
"shortName": "microsoft",
|
||||
"dateUpdated": "2026-10-31T18:12:35.411Z"
|
||||
"dateUpdated": "2026-11-10T20:46:21.467Z"
|
||||
},
|
||||
"references": [
|
||||
{
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-28T18:28:18.685Z",
|
||||
"datePublished": "2026-11-10T18:15:19.386Z",
|
||||
"dateUpdated": "2026-11-10T19:35:25.776Z"
|
||||
"dateUpdated": "2026-11-10T21:21:35.594Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -96,6 +96,40 @@
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"id": "CVE-2026-102224",
|
||||
"role": "CISA Coordinator",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"version": "2.0.3",
|
||||
"timestamp": "2026-11-10T21:18:45.910705Z"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-10T21:21:35.594Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-28T18:28:18.685Z",
|
||||
"datePublished": "2026-10-13T19:01:35.181Z",
|
||||
"dateUpdated": "2026-10-31T18:12:37.884Z"
|
||||
"dateUpdated": "2026-11-10T20:46:23.910Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -506,7 +506,7 @@
|
||||
"providerMetadata": {
|
||||
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
|
||||
"shortName": "microsoft",
|
||||
"dateUpdated": "2026-10-31T18:12:37.884Z"
|
||||
"dateUpdated": "2026-11-10T20:46:23.910Z"
|
||||
},
|
||||
"references": [
|
||||
{
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-28T18:28:18.685Z",
|
||||
"datePublished": "2026-10-13T19:01:35.246Z",
|
||||
"dateUpdated": "2026-10-31T18:12:38.533Z"
|
||||
"dateUpdated": "2026-11-10T20:46:24.454Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -70,7 +70,7 @@
|
||||
"providerMetadata": {
|
||||
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
|
||||
"shortName": "microsoft",
|
||||
"dateUpdated": "2026-10-31T18:12:38.533Z"
|
||||
"dateUpdated": "2026-11-10T20:46:24.454Z"
|
||||
},
|
||||
"references": [
|
||||
{
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-28T18:28:18.685Z",
|
||||
"datePublished": "2026-10-13T18:59:25.824Z",
|
||||
"dateUpdated": "2026-10-31T18:00:16.847Z"
|
||||
"dateUpdated": "2026-11-10T20:33:20.629Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -416,7 +416,7 @@
|
||||
"providerMetadata": {
|
||||
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
|
||||
"shortName": "microsoft",
|
||||
"dateUpdated": "2026-10-31T18:00:16.847Z"
|
||||
"dateUpdated": "2026-11-10T20:33:20.629Z"
|
||||
},
|
||||
"references": [
|
||||
{
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-28T18:28:18.685Z",
|
||||
"datePublished": "2026-10-13T18:59:26.573Z",
|
||||
"dateUpdated": "2026-10-31T18:00:21.024Z"
|
||||
"dateUpdated": "2026-11-10T20:33:24.634Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -25,7 +25,7 @@
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:microsoft:visual_studio_code:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "1.0.0",
|
||||
"versionEndExcluding": "1.141.1"
|
||||
"versionEndExcluding": "1.141.3"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -39,7 +39,7 @@
|
||||
"versions": [
|
||||
{
|
||||
"version": "1.0.0",
|
||||
"lessThan": "1.141.1",
|
||||
"lessThan": "1.141.3",
|
||||
"versionType": "custom",
|
||||
"status": "affected"
|
||||
}
|
||||
@@ -67,7 +67,7 @@
|
||||
"providerMetadata": {
|
||||
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
|
||||
"shortName": "microsoft",
|
||||
"dateUpdated": "2026-10-31T18:00:21.024Z"
|
||||
"dateUpdated": "2026-11-10T20:33:24.634Z"
|
||||
},
|
||||
"references": [
|
||||
{
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-28T18:28:18.685Z",
|
||||
"datePublished": "2026-11-10T18:19:21.754Z",
|
||||
"dateUpdated": "2026-11-10T19:39:36.296Z"
|
||||
"dateUpdated": "2026-11-10T21:21:35.443Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -96,6 +96,40 @@
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"id": "CVE-2026-102230",
|
||||
"role": "CISA Coordinator",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "partial"
|
||||
}
|
||||
],
|
||||
"version": "2.0.3",
|
||||
"timestamp": "2026-11-10T21:18:34.531793Z"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-10T21:21:35.443Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-28T18:28:18.686Z",
|
||||
"datePublished": "2026-10-13T18:59:27.524Z",
|
||||
"dateUpdated": "2026-10-31T18:00:21.534Z"
|
||||
"dateUpdated": "2026-11-10T20:33:25.205Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -25,7 +25,7 @@
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:microsoft:visual_studio_code:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "1.0.0",
|
||||
"versionEndExcluding": "1.141.1"
|
||||
"versionEndExcluding": "1.141.3"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -39,7 +39,7 @@
|
||||
"versions": [
|
||||
{
|
||||
"version": "1.0.0",
|
||||
"lessThan": "1.141.1",
|
||||
"lessThan": "1.141.3",
|
||||
"versionType": "custom",
|
||||
"status": "affected"
|
||||
}
|
||||
@@ -67,7 +67,7 @@
|
||||
"providerMetadata": {
|
||||
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
|
||||
"shortName": "microsoft",
|
||||
"dateUpdated": "2026-10-31T18:00:21.534Z"
|
||||
"dateUpdated": "2026-11-10T20:33:25.205Z"
|
||||
},
|
||||
"references": [
|
||||
{
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-28T18:28:18.686Z",
|
||||
"datePublished": "2026-10-13T18:59:27.671Z",
|
||||
"dateUpdated": "2026-10-31T18:00:22.036Z"
|
||||
"dateUpdated": "2026-11-10T20:33:25.704Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -25,7 +25,7 @@
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:microsoft:visual_studio_code:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "1.0.0",
|
||||
"versionEndExcluding": "1.141.1"
|
||||
"versionEndExcluding": "1.141.3"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -39,7 +39,7 @@
|
||||
"versions": [
|
||||
{
|
||||
"version": "1.0.0",
|
||||
"lessThan": "1.141.1",
|
||||
"lessThan": "1.141.3",
|
||||
"versionType": "custom",
|
||||
"status": "affected"
|
||||
}
|
||||
@@ -67,7 +67,7 @@
|
||||
"providerMetadata": {
|
||||
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
|
||||
"shortName": "microsoft",
|
||||
"dateUpdated": "2026-10-31T18:00:22.036Z"
|
||||
"dateUpdated": "2026-11-10T20:33:25.704Z"
|
||||
},
|
||||
"references": [
|
||||
{
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-28T18:28:18.686Z",
|
||||
"datePublished": "2026-10-13T18:59:27.746Z",
|
||||
"dateUpdated": "2026-10-31T18:00:22.643Z"
|
||||
"dateUpdated": "2026-11-10T20:33:26.203Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -25,7 +25,7 @@
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:microsoft:visual_studio_code:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "1.0.0",
|
||||
"versionEndExcluding": "1.141.1"
|
||||
"versionEndExcluding": "1.141.3"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -39,7 +39,7 @@
|
||||
"versions": [
|
||||
{
|
||||
"version": "1.0.0",
|
||||
"lessThan": "1.141.1",
|
||||
"lessThan": "1.141.3",
|
||||
"versionType": "custom",
|
||||
"status": "affected"
|
||||
}
|
||||
@@ -67,7 +67,7 @@
|
||||
"providerMetadata": {
|
||||
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
|
||||
"shortName": "microsoft",
|
||||
"dateUpdated": "2026-10-31T18:00:22.643Z"
|
||||
"dateUpdated": "2026-11-10T20:33:26.203Z"
|
||||
},
|
||||
"references": [
|
||||
{
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-28T18:28:18.686Z",
|
||||
"datePublished": "2026-10-13T18:59:27.814Z",
|
||||
"dateUpdated": "2026-10-31T18:00:23.326Z"
|
||||
"dateUpdated": "2026-11-10T20:33:26.876Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -25,7 +25,7 @@
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:microsoft:visual_studio_code:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "1.0.0",
|
||||
"versionEndExcluding": "1.141.1"
|
||||
"versionEndExcluding": "1.141.3"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -39,7 +39,7 @@
|
||||
"versions": [
|
||||
{
|
||||
"version": "1.0.0",
|
||||
"lessThan": "1.141.1",
|
||||
"lessThan": "1.141.3",
|
||||
"versionType": "custom",
|
||||
"status": "affected"
|
||||
}
|
||||
@@ -67,7 +67,7 @@
|
||||
"providerMetadata": {
|
||||
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
|
||||
"shortName": "microsoft",
|
||||
"dateUpdated": "2026-10-31T18:00:23.326Z"
|
||||
"dateUpdated": "2026-11-10T20:33:26.876Z"
|
||||
},
|
||||
"references": [
|
||||
{
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-28T18:28:18.686Z",
|
||||
"datePublished": "2026-10-13T18:59:27.902Z",
|
||||
"dateUpdated": "2026-10-31T18:00:23.825Z"
|
||||
"dateUpdated": "2026-11-10T20:33:27.400Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -25,7 +25,7 @@
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:microsoft:visual_studio_code:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "1.0.0",
|
||||
"versionEndExcluding": "1.141.1"
|
||||
"versionEndExcluding": "1.141.3"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -39,7 +39,7 @@
|
||||
"versions": [
|
||||
{
|
||||
"version": "1.0.0",
|
||||
"lessThan": "1.141.1",
|
||||
"lessThan": "1.141.3",
|
||||
"versionType": "custom",
|
||||
"status": "affected"
|
||||
}
|
||||
@@ -67,7 +67,7 @@
|
||||
"providerMetadata": {
|
||||
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
|
||||
"shortName": "microsoft",
|
||||
"dateUpdated": "2026-10-31T18:00:23.825Z"
|
||||
"dateUpdated": "2026-11-10T20:33:27.400Z"
|
||||
},
|
||||
"references": [
|
||||
{
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-28T18:28:18.686Z",
|
||||
"datePublished": "2026-11-10T18:15:18.864Z",
|
||||
"dateUpdated": "2026-11-10T19:35:25.195Z"
|
||||
"dateUpdated": "2026-11-10T21:21:35.083Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -96,6 +96,40 @@
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
},
|
||||
"adp": [
|
||||
{
|
||||
"metrics": [
|
||||
{
|
||||
"other": {
|
||||
"type": "ssvc",
|
||||
"content": {
|
||||
"id": "CVE-2026-102236",
|
||||
"role": "CISA Coordinator",
|
||||
"options": [
|
||||
{
|
||||
"Exploitation": "none"
|
||||
},
|
||||
{
|
||||
"Automatable": "no"
|
||||
},
|
||||
{
|
||||
"Technical Impact": "total"
|
||||
}
|
||||
],
|
||||
"version": "2.0.3",
|
||||
"timestamp": "2026-11-10T21:18:23.620078Z"
|
||||
}
|
||||
}
|
||||
}
|
||||
],
|
||||
"title": "CISA ADP Vulnrichment",
|
||||
"providerMetadata": {
|
||||
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
|
||||
"shortName": "CISA-ADP",
|
||||
"dateUpdated": "2026-11-10T21:21:35.083Z"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-28T18:28:18.686Z",
|
||||
"datePublished": "2026-10-13T18:59:28.040Z",
|
||||
"dateUpdated": "2026-10-31T18:00:24.375Z"
|
||||
"dateUpdated": "2026-11-10T20:33:27.902Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -25,7 +25,7 @@
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:microsoft:visual_studio_code:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "1.0.0",
|
||||
"versionEndExcluding": "1.141.1"
|
||||
"versionEndExcluding": "1.141.3"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -39,7 +39,7 @@
|
||||
"versions": [
|
||||
{
|
||||
"version": "1.0.0",
|
||||
"lessThan": "1.141.1",
|
||||
"lessThan": "1.141.3",
|
||||
"versionType": "custom",
|
||||
"status": "affected"
|
||||
}
|
||||
@@ -67,7 +67,7 @@
|
||||
"providerMetadata": {
|
||||
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
|
||||
"shortName": "microsoft",
|
||||
"dateUpdated": "2026-10-31T18:00:24.375Z"
|
||||
"dateUpdated": "2026-11-10T20:33:27.902Z"
|
||||
},
|
||||
"references": [
|
||||
{
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-29T17:27:07.498Z",
|
||||
"datePublished": "2026-10-13T18:56:35.500Z",
|
||||
"dateUpdated": "2026-10-31T18:00:08.757Z"
|
||||
"dateUpdated": "2026-11-10T20:33:13.780Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -115,7 +115,7 @@
|
||||
"providerMetadata": {
|
||||
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
|
||||
"shortName": "microsoft",
|
||||
"dateUpdated": "2026-10-31T18:00:08.757Z"
|
||||
"dateUpdated": "2026-11-10T20:33:13.780Z"
|
||||
},
|
||||
"references": [
|
||||
{
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-29T17:27:07.498Z",
|
||||
"datePublished": "2026-10-13T18:56:38.866Z",
|
||||
"dateUpdated": "2026-10-31T18:00:10.316Z"
|
||||
"dateUpdated": "2026-11-10T20:33:14.432Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -115,7 +115,7 @@
|
||||
"providerMetadata": {
|
||||
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
|
||||
"shortName": "microsoft",
|
||||
"dateUpdated": "2026-10-31T18:00:10.316Z"
|
||||
"dateUpdated": "2026-11-10T20:33:14.432Z"
|
||||
},
|
||||
"references": [
|
||||
{
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-29T17:27:07.498Z",
|
||||
"datePublished": "2026-10-13T19:01:30.696Z",
|
||||
"dateUpdated": "2026-10-31T18:12:11.253Z"
|
||||
"dateUpdated": "2026-11-10T20:45:51.717Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -25,7 +25,7 @@
|
||||
"vulnerable": true,
|
||||
"criteria": "cpe:2.3:a:microsoft:visual_studio_code:*:*:*:*:*:*:*:*",
|
||||
"versionStartIncluding": "1.0.0",
|
||||
"versionEndExcluding": "1.141.1"
|
||||
"versionEndExcluding": "1.141.3"
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -39,7 +39,7 @@
|
||||
"versions": [
|
||||
{
|
||||
"version": "1.0.0",
|
||||
"lessThan": "1.141.1",
|
||||
"lessThan": "1.141.3",
|
||||
"versionType": "custom",
|
||||
"status": "affected"
|
||||
}
|
||||
@@ -67,7 +67,7 @@
|
||||
"providerMetadata": {
|
||||
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
|
||||
"shortName": "microsoft",
|
||||
"dateUpdated": "2026-10-31T18:12:11.253Z"
|
||||
"dateUpdated": "2026-11-10T20:45:51.717Z"
|
||||
},
|
||||
"references": [
|
||||
{
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-29T17:27:07.498Z",
|
||||
"datePublished": "2026-10-13T18:59:28.303Z",
|
||||
"dateUpdated": "2026-10-31T18:00:25.871Z"
|
||||
"dateUpdated": "2026-11-10T20:33:29.587Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -115,7 +115,7 @@
|
||||
"providerMetadata": {
|
||||
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
|
||||
"shortName": "microsoft",
|
||||
"dateUpdated": "2026-10-31T18:00:25.871Z"
|
||||
"dateUpdated": "2026-11-10T20:33:29.587Z"
|
||||
},
|
||||
"references": [
|
||||
{
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-29T17:27:07.498Z",
|
||||
"datePublished": "2026-10-13T18:59:28.397Z",
|
||||
"dateUpdated": "2026-10-31T18:00:26.374Z"
|
||||
"dateUpdated": "2026-11-10T20:33:30.191Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -121,7 +121,7 @@
|
||||
"providerMetadata": {
|
||||
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
|
||||
"shortName": "microsoft",
|
||||
"dateUpdated": "2026-10-31T18:00:26.374Z"
|
||||
"dateUpdated": "2026-11-10T20:33:30.191Z"
|
||||
},
|
||||
"references": [
|
||||
{
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-29T17:27:07.498Z",
|
||||
"datePublished": "2026-10-13T18:59:28.473Z",
|
||||
"dateUpdated": "2026-10-31T18:00:26.976Z"
|
||||
"dateUpdated": "2026-11-10T20:33:30.666Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -121,7 +121,7 @@
|
||||
"providerMetadata": {
|
||||
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
|
||||
"shortName": "microsoft",
|
||||
"dateUpdated": "2026-10-31T18:00:26.976Z"
|
||||
"dateUpdated": "2026-11-10T20:33:30.666Z"
|
||||
},
|
||||
"references": [
|
||||
{
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-29T17:27:07.498Z",
|
||||
"datePublished": "2026-10-13T18:59:28.552Z",
|
||||
"dateUpdated": "2026-10-31T18:00:28.026Z"
|
||||
"dateUpdated": "2026-11-10T20:33:31.173Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -103,7 +103,7 @@
|
||||
"providerMetadata": {
|
||||
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
|
||||
"shortName": "microsoft",
|
||||
"dateUpdated": "2026-10-31T18:00:28.026Z"
|
||||
"dateUpdated": "2026-11-10T20:33:31.173Z"
|
||||
},
|
||||
"references": [
|
||||
{
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-29T17:27:07.498Z",
|
||||
"datePublished": "2026-10-13T18:59:28.634Z",
|
||||
"dateUpdated": "2026-10-31T18:00:29.622Z"
|
||||
"dateUpdated": "2026-11-10T20:33:31.683Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -70,7 +70,7 @@
|
||||
"providerMetadata": {
|
||||
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
|
||||
"shortName": "microsoft",
|
||||
"dateUpdated": "2026-10-31T18:00:29.622Z"
|
||||
"dateUpdated": "2026-11-10T20:33:31.683Z"
|
||||
},
|
||||
"references": [
|
||||
{
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-29T17:27:07.499Z",
|
||||
"datePublished": "2026-10-13T18:59:28.895Z",
|
||||
"dateUpdated": "2026-10-31T18:00:30.292Z"
|
||||
"dateUpdated": "2026-11-10T20:33:32.127Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -70,7 +70,7 @@
|
||||
"providerMetadata": {
|
||||
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
|
||||
"shortName": "microsoft",
|
||||
"dateUpdated": "2026-10-31T18:00:30.292Z"
|
||||
"dateUpdated": "2026-11-10T20:33:32.127Z"
|
||||
},
|
||||
"references": [
|
||||
{
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-29T17:27:07.499Z",
|
||||
"datePublished": "2026-10-13T18:59:28.968Z",
|
||||
"dateUpdated": "2026-10-31T18:00:30.798Z"
|
||||
"dateUpdated": "2026-11-10T20:33:32.632Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -70,7 +70,7 @@
|
||||
"providerMetadata": {
|
||||
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
|
||||
"shortName": "microsoft",
|
||||
"dateUpdated": "2026-10-31T18:00:30.798Z"
|
||||
"dateUpdated": "2026-11-10T20:33:32.632Z"
|
||||
},
|
||||
"references": [
|
||||
{
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-29T17:27:07.499Z",
|
||||
"datePublished": "2026-10-13T18:59:29.063Z",
|
||||
"dateUpdated": "2026-10-31T18:00:31.307Z"
|
||||
"dateUpdated": "2026-11-10T20:33:33.158Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -70,7 +70,7 @@
|
||||
"providerMetadata": {
|
||||
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
|
||||
"shortName": "microsoft",
|
||||
"dateUpdated": "2026-10-31T18:00:31.307Z"
|
||||
"dateUpdated": "2026-11-10T20:33:33.158Z"
|
||||
},
|
||||
"references": [
|
||||
{
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-29T17:27:07.499Z",
|
||||
"datePublished": "2026-10-13T18:59:29.133Z",
|
||||
"dateUpdated": "2026-10-31T18:00:31.882Z"
|
||||
"dateUpdated": "2026-11-10T20:33:33.668Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -70,7 +70,7 @@
|
||||
"providerMetadata": {
|
||||
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
|
||||
"shortName": "microsoft",
|
||||
"dateUpdated": "2026-10-31T18:00:31.882Z"
|
||||
"dateUpdated": "2026-11-10T20:33:33.668Z"
|
||||
},
|
||||
"references": [
|
||||
{
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-29T17:27:07.499Z",
|
||||
"datePublished": "2026-10-13T18:59:29.227Z",
|
||||
"dateUpdated": "2026-10-31T18:00:32.395Z"
|
||||
"dateUpdated": "2026-11-10T20:33:34.247Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -70,7 +70,7 @@
|
||||
"providerMetadata": {
|
||||
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
|
||||
"shortName": "microsoft",
|
||||
"dateUpdated": "2026-10-31T18:00:32.395Z"
|
||||
"dateUpdated": "2026-11-10T20:33:34.247Z"
|
||||
},
|
||||
"references": [
|
||||
{
|
||||
|
||||
@@ -8,7 +8,7 @@
|
||||
"assignerShortName": "microsoft",
|
||||
"dateReserved": "2026-09-29T17:27:07.499Z",
|
||||
"datePublished": "2026-10-13T18:59:29.306Z",
|
||||
"dateUpdated": "2026-10-31T18:00:32.839Z"
|
||||
"dateUpdated": "2026-11-10T20:33:34.927Z"
|
||||
},
|
||||
"containers": {
|
||||
"cna": {
|
||||
@@ -70,7 +70,7 @@
|
||||
"providerMetadata": {
|
||||
"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
|
||||
"shortName": "microsoft",
|
||||
"dateUpdated": "2026-10-31T18:00:32.839Z"
|
||||
"dateUpdated": "2026-11-10T20:33:34.927Z"
|
||||
},
|
||||
"references": [
|
||||
{
|
||||
|
||||
Some files were not shown because too many files have changed in this diff Show More
Reference in New Issue
Block a user