What’s Vulnerable › Vulnerabilities

CVE-2025-0032

• Severity: high (CVSS 7.2 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-09-06 · updated 2026-06-17
• Weakness: CWE-459

Description

Improper cleanup in AMD CPU microcode patch loading could allow an attacker with local administrator privilege to load malicious CPU microcode, potentially resulting in loss of integrity of x86 instruction execution.

Affected products

• AMD EPYC™ 9005 Series Processors: all versions
• AMD EPYC™ Embedded 9000 Series Processors: all versions
• AMD Ryzen™ 9000 Series Desktop Processors: all versions
• AMD Ryzen™ 9000HX Series Processors: all versions
• AMD Ryzen™ AI 300 Series Processors: all versions
• AMD Ryzen™ Al Max+: all versions
• AMD Ryzen™ Threadripper™ 9000 Series: all versions

References

• https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-3014.html
• https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-4012.html
• https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-5007.html

Get alerted when CVE-2025-0032 or the next vulnerability affects your stack