CVE-2018-8936: AMD Epyc Server Firmware

Critical severity, CVSS 9.0. EPSS: 1.8% chance of exploitation in the next 30 days.

The AMD EPYC Server, Ryzen, Ryzen Pro, and Ryzen Mobile processor chips allow Platform Security Processor (PSP) privilege escalation.

Affected products

• AMD Epyc Server Firmware: affected versions not specified
• AMD Ryzen Firmware: affected versions not specified
• AMD Ryzen Mobile Firmware: affected versions not specified
• AMD Ryzen Pro Firmware: affected versions not specified

Published 2018-03-22. Last modified 2026-06-17.