CVE-2018-8930: AMD Epyc Server Firmware

Critical severity, CVSS 9.0. EPSS: 1.8% chance of exploitation in the next 30 days.

The AMD EPYC Server, Ryzen, Ryzen Pro, and Ryzen Mobile processor chips have insufficient enforcement of Hardware Validated Boot, aka MASTERKEY-1, MASTERKEY-2, and MASTERKEY-3.

Affected products

• AMD Epyc Server Firmware: affected versions not specified
• AMD Ryzen Firmware: affected versions not specified
• AMD Ryzen Mobile Firmware: affected versions not specified
• AMD Ryzen Pro Firmware: affected versions not specified

Published 2018-03-22. Last modified 2026-06-17.