AMD Epyc Embedded 9000 Series Processors vulnerabilities

2 CVEs affecting AMD Epyc Embedded 9000 Series Processors, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-48521, published 2026-05-15.

More from AMD.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2025-0032, published 2025-09-06. High severity, CVSS 7.2. EPSS: 0.2% chance of exploitation in the next 30 days. Improper cleanup in AMD CPU microcode patch loading could allow an attacker with local administrator privilege to load malicious CPU microcode, potentially resulting in loss of integrity of x86…
• CVE-2025-48521, published 2026-05-15. Medium severity, CVSS 6.9. EPSS: 0.1% chance of exploitation in the next 30 days. Improper input validation in the AMD Secure Processor (ASP) PCI driver could allow a local attacker to trigger a Use-After-Free (UAF) condition, potentially resulting in a loss of platform integrity…