Skip to content
Fencer Intel
medium 5.7

CVE-2026-0004 json

A transient execution vulnerability in some AMD processors may allow an attacker with the ability to execute code on the system to infer da…

published 2d ago modified 2d ago also EUVD-2026-124645

cvss
5.7
version 4.0, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.2%
EPSS 0.2% chance of exploitation in 30 days, percentile 7%
public exploits
0
none known

Summary

A transient execution vulnerability in some AMD processors may allow an attacker with the ability to execute code on the system to infer data in the L1D cache, potentially resulting in the leakage of sensitive information across privileged boundaries.

Patch / fix

  • AMD AMD EPYC™ 9005 Series Processors TurinPI_1.0.0.B
  • AMD AMD EPYC™ 8005 Series Processors TurinPI_1.0.0.B
  • AMD AMD Ryzen™ 9000HX Series Processors FireRangeFL1 PI-1.0.0.0i
  • AMD AMD Ryzen™ AI 300 Series Processors StrixKrackanPI-FP8_1.1.0.0h, StrixKrackanPI-FP8_1.1.0.2g
  • AMD AMD Ryzen™ 9000 Series Desktop Processors ComboAM5PI_1.2.0.3l, ComboAM5PI_1.3.0.1d
  • AMD AMD Ryzen™ AI Max 400 Series Processors GorgonHalo PI FP11_1.0.0.0b
  • AMD AMD Ryzen™ AI Max 300 Series Processors StrixHalo PI-FP11_1.0.0.2d
  • AMD AMD Ryzen™ AI 400 Series Desktop Processors ComboAM5PI_1.3.0.1d
  • AMD AMD Ryzen™ Z1 Series Processors StrixKrackanPI-FP8_1.1.0.0h
  • AMD AMD Ryzen™ Z2 Series Processors Extreme StrixKrackanPI-FP8_1.1.0.0h
  • AMD AMD Ryzen™ Threadripper™ PRO 7000 WX-Series Processors ShimadaPeakPI-SP6-1.0.0.1h
  • AMD AMD Ryzen™ Threadripper™ 7000 Processors ShimadaPeakPI-SP6-1.0.0.1h
  • AMD AMD Ryzen™ AI 400 Series Processors GorgonPI-FP8_1.0.0.2e
  • AMD AMD Ryzen™ Threadripper™ 9000 Processors ShimadaPeakPI-SP6-1.0.0.1h
  • AMD AMD Ryzen™ Threadripper™ PRO 9000 WX-Series Processors ShimadaPeakPI-SP6-1.0.0.1h
  • AMD AMD EPYC™ Embedded 9005 Series Processors EmbeddedTurinPI_SP5_1005
  • AMD AMD Ryzen™ Embedded 9000 Series Processors EmbeddedAM5PI_1.0.0.9
  • AMD AMD EPYC™ Embedded 2005 Series Processors EmbeddedFireRangeFL1_1.0.0.5
  • AMD AMD Ryzen™ Embedded P100 Series Processors EmbeddedP100 PI 1000

Is CVE-2026-0004 in your stack? Fencer shows which of your repositories are affected as soon as an advisory lands, and opens the fix as a pull request.

Check with Fencer

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
partial
Assessed
2d ago

Exploit prediction

0.18% chance of exploitation in the next 30 days, higher than 7% of all scored CVEs (FIRST EPSS, 2026-11-14).

CVSS scores

assigned by version score vector
CNA 4.0 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
CNA 4.0 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Affected products

  • AMD AMD EPYC™ 9005 Series Processors
  • AMD AMD EPYC™ 8005 Series Processors
  • AMD AMD Ryzen™ 9000HX Series Processors
  • AMD AMD Ryzen™ AI 300 Series Processors
  • AMD AMD Ryzen™ 9000 Series Desktop Processors
  • AMD AMD Ryzen™ AI Max 400 Series Processors
  • AMD AMD Ryzen™ AI Max 300 Series Processors
  • AMD AMD Ryzen™ AI 400 Series Desktop Processors
  • AMD AMD Ryzen™ Z1 Series Processors
  • AMD AMD Ryzen™ Z2 Series Processors Extreme
  • AMD AMD Ryzen™ Threadripper™ PRO 7000 WX-Series Processors
  • AMD AMD Ryzen™ Threadripper™ 7000 Processors
  • AMD AMD Ryzen™ AI 400 Series Processors
  • AMD AMD Ryzen™ Threadripper™ 9000 Processors
  • AMD AMD Ryzen™ Threadripper™ PRO 9000 WX-Series Processors
  • AMD AMD EPYC™ Embedded 9005 Series Processors
  • AMD AMD Ryzen™ Embedded 9000 Series Processors
  • AMD AMD EPYC™ Embedded 2005 Series Processors
  • AMD AMD Ryzen™ Embedded P100 Series Processors

Classification

Weakness
  • CWE-1421 Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution

References

Sources

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.