SecurityWeek reports Intel and AMD addressed over 200 flaws
SecurityWeek reports Intel and AMD published over 50 advisories covering over 200 flaws; check vendor advisories and apply available updates.
- Published
- Fixed in
- Fixes available for most flaws per SecurityWeek, some AMD updates still pending (some as late as 2027), no patch for discontinued Intel BigDL
- Exploitation
- No exploitation reported in the SecurityWeek article
Live scores
CVE-2026-61887- EPSS
- 0.003
low predicted chance of attack - VEDAS
- 0.039
little exploit evidence - On CISA KEV
- Not listed
- Detection rule
- No public rule yet
What happened
According to SecurityWeek, Intel and AMD published more than 50 new security advisories describing over 200 vulnerabilities in their products SecurityWeek. SecurityWeek says fixes are available for most of the flaws, but not all. The figures below are SecurityWeek’s summary. The vendor advisories were not among the sources reviewed, so the details are not independently verified here.
Intel. SecurityWeek reports 24 advisories covering just over 100 vulnerabilities, with three rated critical and 20 rated high. The largest advisory covers 30 flaws in the TDX Migration Trust Domain (MigTD) reference software. It includes three critical authentication issues that can be exploited for privilege escalation. SecurityWeek says one of them, CVE-2026-61887, could also allow remote code execution. SecurityWeek also lists high-severity privilege escalation bugs in Slim Bootloader, the UEFI firmware of the D50DNP and M50FCP server boards, and VTune Profiler. It lists high-severity denial-of-service bugs in PROSet/Wireless WiFi and Bluetooth and in Performance Counter Monitor.
AMD. SecurityWeek reports 29 security bulletins and two security briefs covering roughly 100 unique CVEs, including a few not specific to AMD. It says none were assigned a critical CVSS score. One bulletin describes 44 issues in Radeon and Instinct products, ten of them high severity. SecurityWeek also names high-severity issues in these areas:
- a UEFI flaw that could allow arbitrary code execution in System Management Mode
- a Secure Debug Unlock bypass
- an IOMMU denial-of-service flaw
- a TianoCore EDK II bug
- a missing authentication flaw in AMD Management Console
- a privilege escalation bug in Vivado Lab Solutions
Several bulletins relate to research on Transient Scheduler Attacks, including additional mitigations for Zen 5 processors.
Not confirmed: SecurityWeek does not report active exploitation of any of these flaws. Per-product affected versions and fixed versions are not given in the article, so they are not confirmed here.
Am I affected?
SecurityWeek’s article does not list affected versions, so that is not confirmed here. According to SecurityWeek, the affected areas are:
- Intel: TDX MigTD software, Slim Bootloader, D50DNP and M50FCP server board UEFI firmware, VTune Profiler, PROSet/Wireless, PCM, graphics, NPU and QAT drivers, and other software including Neural Compressor, Hyperscan and oneDNN.
- AMD: Radeon and Instinct graphics, UEFI and SMM firmware, AMD Management Console, Vivado Lab Solutions, SEV, the AMD Secure Processor, IOMMU, and Versal adaptive SoCs.
- Intel BigDL is discontinued and will not be patched, according to SecurityWeek.
What to do now
- List the Intel and AMD products, firmware and drivers in your environment, then compare them against the vendors’ own advisories for this release. The details are not in the SecurityWeek article.
- Apply the updates that are already available, prioritising the items SecurityWeek rates critical or high that match your hardware.
- If you use Intel BigDL, follow Intel’s advice as quoted by SecurityWeek: “uninstall it or discontinue use as soon as possible”.
- For AMD products where the fix is not yet released, track the vendor bulletin. SecurityWeek says some updates are expected in the coming weeks or months, some as late as 2027.