CVE-2024-56161 impacts AMD SEV-SNP Microcode

Background CVE-2024-56161 is an improper signature verification vulnerability found in the AMD CPU ROM microcode patch loader. This vulnerability enables an attacker with local administrator privileges to load malicious CPU microcode, thereby compromising the security of confidential workloads running under AMD SEV-SNP. This was disclosed by researchers from Google Technical Details Root Cause The vulnerability […]

AMD fixed a flaw that allowed to load malicious microcode

securityaffairs.co - 04/Feb 14:49

AMD released security patches to fix a flaw that could bypass SEV protection, letting attackers load malicious microcode. Researchers from Google...

AMD fixes bug that lets hackers load malicious microcode patches

bleepingcomputer.com - 05/Feb 18:30

AMD has released mitigation and firmware updates to address a high-severity vulnerability that can be exploited to load malicious CPU microcode on...

CVE-2025-0065 Impacts TeamViewer Client

thecyberthrone.in - 29/Jan 12:30

Background CVE-2025-0065 is an unauthenticated privilege escalation vulnerability with a CVSS score of 7.8. This flaw is found in the...

VMware fixes CVE-2025-22217 in Avi Load Balancer

thecyberthrone.in - 29/Jan 00:56

Background CVE-2025-22217 is a critical vulnerability identified in VMware’s Avi Load Balancer, which is an unauthenticated blind SQL injection...

CVE-2025-21293 PoC Exploit Code Released

thecyberthrone.in - 06/Feb 00:25

Vulnerability Overview CVE-2025-21293 is an elevation of privilege vulnerability in Active Directory Domain Services. The vulnerability arises from...

CVE-2025-25064 impacts Zimbra with SQL Injection

thecyberthrone.in - 10/Feb 16:03

CVE-2025-25064 is a critical security vulnerability identified in Zimbra Collaboration software, a widely used email and collaboration platform. This...

Fortinet FortiOS & FortiProxy Zero-Day Exploited to Hijack Firewall & Gain Super Admin Access

itsecuritynews.info - 20:32

Cybersecurity firm Fortinet has issued an urgent warning regarding a newly discovered zero-day authentication bypass vulnerability (CVE-2025-24472)...

CVE-2025-23419 impacts Nginx Server

thecyberthrone.in - 07/Feb 08:27

CVE-2025-23419 is a security vulnerability that arises when multiple server blocks in an Nginx configuration share the same IP address and port. An...

AMD patches high severity security flaw affecting Zen chips

lovablevibes.co - 05/Feb 20:26

AMD advisory warns about a new high-severity security flaw The bug affects Zen 1 to Zen 4 CPUs Abuse could lead to the loss of SEV-based protection of...

In the AMD chips, they found a security vulnerability that allows computer pirates to capture their computer pirates 15:16

socialbites.ca - 04/Feb 12:19

Google, EPYC server and consumer Ryzen Zen 4, including a wide variety of AMD processors announced that the critical vulnerability is perceived....

Rubriques :