PULSE
FEED
ransomvexy ransomware reclama a Franc-Oil · NG · Energy & Utilitiesransomvexy ransomware reclama a Osiiminppal · GLransomvexy ransomware reclama a Upper Web · BR · Technologyransomsafepay reclama a toyokiki-thailand.com · TH · Manufacturingransomincransom reclama a axiscades.com · IN · Manufacturingransomcurious worm reclama a benchmarkseniorliving.com · US · Healthcareransomaoqin reclama a Airblue · PK · Transportationransompanzer reclama a Ministry of Health Malaysia · MY · Government & Defenseransomkrybit reclama a cey-tech.com · CY · Technologyransommetaencryptor reclama a Promantra, Inc. · US · Technologyransomincransom reclama a CIMSA LOGISTICS · US · Transportationransomincransom reclama a HELP Foundation · US · Otherransomincransom reclama a gamechangerwm.com · US · Professional Servicesransomincransom reclama a raymondjames.com · US · Financial Servicesransomvexy ransomware reclama a Franc-Oil · NG · Energy & Utilitiesransomvexy ransomware reclama a Osiiminppal · GLransomvexy ransomware reclama a Upper Web · BR · Technologyransomsafepay reclama a toyokiki-thailand.com · TH · Manufacturingransomincransom reclama a axiscades.com · IN · Manufacturingransomcurious worm reclama a benchmarkseniorliving.com · US · Healthcareransomaoqin reclama a Airblue · PK · Transportationransompanzer reclama a Ministry of Health Malaysia · MY · Government & Defenseransomkrybit reclama a cey-tech.com · CY · Technologyransommetaencryptor reclama a Promantra, Inc. · US · Technologyransomincransom reclama a CIMSA LOGISTICS · US · Transportationransomincransom reclama a HELP Foundation · US · Otherransomincransom reclama a gamechangerwm.com · US · Professional Servicesransomincransom reclama a raymondjames.com · US · Financial Services
← Todos los CVEs
CVE Watch12 nov 2026

CVE-2026-0436

Insufficient parameter sanitization in the AMD Secure Processor (ASP) trusted execution environment (TEE) SPDM driver could allow an attacke

CVSS

—

Sin CVSS

EPSS

—

KEV

—

Exploit Today

—

0-100

Publicado: 12 nov 2026 · Última mod.: 12 nov 2026 · CWE-120

EPSS · 30d

Sin historial EPSS suficiente todavía.

Descripción técnica

Insufficient parameter sanitization in the AMD Secure Processor (ASP) trusted execution environment (TEE) SPDM driver could allow an attacker to supply malicious input, potentially resulting in loss of platform integrity, memory leakage, or denial of service.

Referencias oficiales
CVEs relacionados
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-1100887.8 ALT
28.5%
——9Premiere Pro is affected by a Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file.2d
CVE-2026-1100876.7 MED
16.4%
——5Premiere Pro is affected by a Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue requires user interaction in that a victim must open a malicious file.2d
CVE-2026-1249478.8 ALT
26.9%
——8Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 160 and Thunderbird 160.2d
CVE-2026-1249268.8 ALT
28.3%
——9Incorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.2d
CVE-2026-1249248.8 ALT
28.3%
——9Incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.2d
CVE-2026-1249188.8 ALT
27.5%
——8Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 160, Firefox ESR 153.7, Thunderbird 160, and Thunderbird 153.7.2d