AMD Epyc 7663 vulnerabilities

2 CVEs affecting AMD Epyc 7663, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-26311, published 2021-05-13.

More from AMD.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2021-26311, published 2021-05-13. High severity, CVSS 7.2. EPSS: 1.7% chance of exploitation in the next 30 days. In the AMD SEV/SEV-ES feature, memory can be rearranged in the guest address space that is not detected by the attestation mechanism which could be used by a malicious hypervisor to potentially lead…
• CVE-2020-12967, published 2021-05-13. High severity, CVSS 7.2. EPSS: 1.7% chance of exploitation in the next 30 days. The lack of nested page table protection in the AMD SEV/SEV-ES feature could potentially lead to arbitrary code execution within the guest VM if a malicious administrator has access to compromise the…