AMD 2nd Gen AMD EPYC™

Name: AMD 2nd Gen AMD EPYC™
Brand: AMD

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

by severity

3critical10high6medium0low

updated 2026-10-27

vulnerabilities (19)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-26322US	high7.5OT elevated	1.05% (64th)	—	RomePI-SP3_1.0.0.C	2021-11-16	unspecified → RomePI-SP3_1.0.0.C
CVE-2021-26338US	high7.5	0.93% (60th)	—	RomePI-SP3_1.0.0.C	2021-11-16	unspecified → RomePI-SP3_1.0.0.C
CVE-2023-20520US	critical9.8	0.79% (56th)	—	no fix	2023-05-09	—
CVE-2021-46769US	high8.8	0.78% (56th)	—	no fix	2023-05-09	—
CVE-2021-26379US	critical9.8	0.68% (52nd)	—	no fix	2023-05-09	—
CVE-2021-46764US	high7.5	0.63% (50th)	—	no fix	2023-05-09	—
CVE-2023-20524US	high7.5	0.49% (42nd)	—	no fix	2023-05-09	—
CVE-2021-46763US	high7.5	0.49% (42nd)	—	no fix	2023-05-09	—
CVE-2021-46762US	critical9.1	0.35% (28th)	—	no fix	2023-05-09	—
CVE-2021-46775US	medium6.8	0.32% (25th)	—	no fix	2023-05-09	—
CVE-2021-26331US	high7.8	0.29% (22nd)	—	RomePI-SP3_1.0.0.C	2021-11-16	unspecified → RomePI-SP3_1.0.0.C
CVE-2021-26408US	high7.1	0.27% (19th)	—	RomePI-SP3_1.0.0.C	2022-05-10	unspecified → RomePI-SP3_1.0.0.C
CVE-2021-26321US	medium5.5	0.25% (17th)	—	RomePI-SP3_1.0.0.C	2021-11-16	unspecified → RomePI-SP3_1.0.0.C
CVE-2020-12961US	high7.8	0.25% (16th)	—	RomePI-SP3_1.0.0.C	2021-11-16	unspecified → RomePI-SP3_1.0.0.C
CVE-2021-26370US	high7.1	0.23% (14th)	—	RomePI-SP3_1.0.0.C	2022-05-10	unspecified → RomePI-SP3_1.0.0.C
CVE-2020-12954US	medium5.5	0.23% (14th)	—	RomePI-SP3_1.0.0.C	2021-11-16	unspecified → RomePI-SP3_1.0.0.C
CVE-2021-26330US	medium5.5	0.22% (12th)	—	RomePI-SP3_1.0.0.C	2021-11-16	unspecified → RomePI-SP3_1.0.0.C
CVE-2021-26329US	medium5.5	0.22% (12th)	—	RomePI-SP3_1.0.0.C	2021-11-16	unspecified → RomePI-SP3_1.0.0.C
CVE-2021-26320US	medium5.5	0.19% (8th)	—	RomePI-SP3_1.0.0.C	2021-11-16	unspecified → RomePI-SP3_1.0.0.C

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation9 CVEs
CWE-787Out-of-bounds Write5 CVEs
CWE-122Heap-based Buffer Overflow1 CVEs
CWE-130Improper Handling of Length Parameter Inconsistency1 CVEs
CWE-190Integer Overflow or Wraparound1 CVEs
CWE-284Improper Access Control1 CVEs
CWE-287Improper Authentication1 CVEs
CWE-295Improper Certificate Validation1 CVEs

sources (1)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)19 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan