AMD Ryzen 9000hx Series Mobile Processors vulnerabilities

5 CVEs affecting AMD Ryzen 9000hx Series Mobile Processors, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-36343, published 2026-05-19.

More from AMD.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2024-36310, published 2026-02-10. Medium severity, CVSS 4.6. EPSS: 0.2% chance of exploitation in the next 30 days. Improper input validation in the SMM communications buffer could allow a privileged attacker to perform an out of bounds read or write to SMRAM potentially resulting in loss of confidentiality or…
• CVE-2024-36343, published 2026-05-19. Medium severity, CVSS 4.6. EPSS: 0.2% chance of exploitation in the next 30 days. Improper input validation in the System Management Mode (SMM) communications buffer could allow a privileged attacker to perform an out of bounds read or write to a limited section of the Top of…
• CVE-2024-36311, published 2026-02-10. Medium severity, CVSS 4.6. EPSS: 0.1% chance of exploitation in the next 30 days. A Time-of-check time-of-use (TOCTOU) race condition in the SMM communications buffer could allow a privileged attacker to bypass input validation and perform an out of bounds read or write,…
• CVE-2024-36345, published 2026-05-15. Medium severity, CVSS 4.6. EPSS: 0.1% chance of exploitation in the next 30 days. Improper input validation in the AMD OverDrive (AOD) System Management Mode (SMM) module could allow a privileged attacker to perform an out-of-bounds read, potentially resulting in loss of…
• CVE-2024-36347, published 2025-06-27. Medium severity, CVSS 6.4. EPSS: 0.1% chance of exploitation in the next 30 days. Improper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with local administrator privilege to load malicious microcode, potentially resulting in loss of integrity…