Transient Execution Vulnerability in AMD Processors
CVE-2026-0004

5.7MEDIUM

Key Information:

Vendor

Amd
Status
Amd Epyc™ 9005 Series Processors
Amd Epyc™ 8005 Series Processors
Amd Ryzen™ 9000hx Series Processors
Amd Ryzen™ Ai 300 Series Processors
Vendor
CVE Published:
12 November 2026

Badges

đź“° News Worthy

What is CVE-2026-0004?

A transient execution vulnerability in specific AMD processors allows attackers who can execute code to potentially infer sensitive information from the L1D cache. This could enable unauthorized access to confidential data across privilege levels, increasing risks to data privacy and security.

Affected Version(s)

AMD EPYC™ 8005 Series Processors TurinPI_1.0.0.B

AMD EPYC™ 9005 Series Processors TurinPI_1.0.0.B

AMD EPYC™ Embedded 2005 Series Processors EmbeddedFireRangeFL1_1.0.0.5

News Articles

favicon imageThe Hacker News

Google Cloud Warns Three AMD Turin CPU Flaws Could Leak Data Across Processes in VMs

Google Cloud says AMD Turin VMs need OS patches and a stop-start cycle to mitigate three CPU side-channel flaws that could expose process data.

10 hours ago

References

https://www.amd.com/en/resources/product-security/bulleti...
https://www.amd.com/en/resources/product-security/bulleti...

CVSS V4

Score:
5.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
High
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • đź“°

    First article discovered by The Hacker News

  • Vulnerability published

  • Vulnerability Reserved

.