CVE-2021-46747

7.1 highEPSS 0.10%

High (7.1). EPSS 0.10% chance of exploitation in the next 30 days.

Insufficient granularity of access control in ASP (AMD Secure Processor) may allow an attacker with an untrusted user space application to map sensitive SMN (System Management Network) apertures leading to a potential escalation of privileges.

Severity

CVSS 4.0

7.1 high

CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

EPSS: 0.10% chance of exploitation in the next 30 days; higher than 0% of CVEs (scores of 2026-10-31)
CWE: CWE-1220
Published: 2026-06-01
Modified: 2026-07-22
Record from: the NVD, synced 2026-10-19

References

https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-4017.html
https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-6027.html

Check your stack JSON