Amd Ryzen Mobile Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Amd Ryzen Mobile Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2018-8930 — CVSS 9.0 (critical): The AMD EPYC Server, Ryzen, Ryzen Pro, and Ryzen Mobile processor chips have insufficient enforcement of Hardware Validated Boot, aka…
• CVE-2018-8931 — CVSS 9.0 (critical): The AMD Ryzen, Ryzen Pro, and Ryzen Mobile processor chips have insufficient access control for the Secure Processor, aka RYZENFALL-1.
• CVE-2018-8936 — CVSS 9.0 (critical): The AMD EPYC Server, Ryzen, Ryzen Pro, and Ryzen Mobile processor chips allow Platform Security Processor (PSP) privilege escalation.