CVE-2026-0004

Vulnerability record

Medium 5.7

Description

A transient execution vulnerability in some AMD processors may allow an attacker with the ability to execute code on the system to infer data in the L1D cache, potentially resulting in the leakage of sensitive information across privileged boundaries.

Key facts

Published: 12 Nov 2026
Last changed: 13 Nov 2026
Assigned by: AMD
EPSS: 0.176% likely to be exploited in the next 30 days, higher than 7.143% of CVEs (scores for 15 Nov 2026)
SSVC (CISA): Exploitation: none; Automatable: no; Technical impact: partial

Severity scores

Each score is shown as its source gave it. They are not averaged or merged.

5.7CVSS 4.0, Mediumfrom the CNA (AMD)CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Historical context and remediation

This reference retains the original CVE publication date. A recent record update does not mean a new attack occurred.

No separately sourced impact summary is available on this page yet. Consult the description, version data and dated exploitation evidence.

No explicit remediation statement is available on this page yet. Consult the original record and vendor references before choosing a fix.

Version statuses below come from the CNA. An “unaffected” version is not necessarily a currently supported release or proof of a patch date. EPSS is a dated risk estimate, not a count of historical attacks.

Read the original CVE record.

Affected products

Vendor	Product	Versions
AMD	AMD EPYC™ 9005 Series Processors	Default status: affected TurinPI_1.0.0.B (unaffected)
AMD	AMD EPYC™ 8005 Series Processors	Default status: affected TurinPI_1.0.0.B (unaffected)
AMD	AMD Ryzen™ 9000HX Series Processors	Default status: affected FireRangeFL1 PI-1.0.0.0i (unaffected)
AMD	AMD Ryzen™ AI 300 Series Processors	Default status: affected StrixKrackanPI-FP8_1.1.0.0h (unaffected) StrixKrackanPI-FP8_1.1.0.2g (unaffected)
AMD	AMD Ryzen™ 9000 Series Desktop Processors	Default status: affected ComboAM5PI_1.2.0.3l (unaffected) ComboAM5PI_1.3.0.1d (unaffected)
AMD	AMD Ryzen™ AI Max 400 Series Processors	Default status: affected GorgonHalo PI FP11_1.0.0.0b (unaffected)
AMD	AMD Ryzen™ AI Max 300 Series Processors	Default status: affected StrixHalo PI-FP11_1.0.0.2d (unaffected)
AMD	AMD Ryzen™ AI 400 Series Desktop Processors	Default status: affected ComboAM5PI_1.3.0.1d (unaffected)
AMD	AMD Ryzen™ Z1 Series Processors	Default status: affected StrixKrackanPI-FP8_1.1.0.0h (unaffected)
AMD	AMD Ryzen™ Z2 Series Processors Extreme	Default status: affected StrixKrackanPI-FP8_1.1.0.0h (unaffected)
AMD	AMD Ryzen™ Threadripper™ PRO 7000 WX-Series Processors	Default status: affected ShimadaPeakPI-SP6-1.0.0.1h (unaffected)
AMD	AMD Ryzen™ Threadripper™ 7000 Processors	Default status: affected ShimadaPeakPI-SP6-1.0.0.1h (unaffected)
AMD	AMD Ryzen™ AI 400 Series Processors	Default status: affected GorgonPI-FP8_1.0.0.2e (unaffected)
AMD	AMD Ryzen™ Threadripper™ 9000 Processors	Default status: affected ShimadaPeakPI-SP6-1.0.0.1h (unaffected)
AMD	AMD Ryzen™ Threadripper™ PRO 9000 WX-Series Processors	Default status: affected ShimadaPeakPI-SP6-1.0.0.1h (unaffected)
AMD	AMD EPYC™ Embedded 9005 Series Processors	Default status: affected EmbeddedTurinPI_SP5_1005 (unaffected)
AMD	AMD Ryzen™ Embedded 9000 Series Processors	Default status: affected EmbeddedAM5PI_1.0.0.9 (unaffected)
AMD	AMD EPYC™ Embedded 2005 Series Processors	Default status: affected EmbeddedFireRangeFL1_1.0.0.5 (unaffected)
AMD	AMD Ryzen™ Embedded P100 Series Processors	Default status: affected EmbeddedP100 PI 1000 (unaffected)