VULNERABILITY INTELLIGENCE
CVE-2024-36326
CVSS score8.4 HIGH
EPSS probability0.13%
CISA KEVNot currently listed
Published2025-09-06
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N
Description
Missing authorization in AMD RomArmor could allow an attacker to bypass ROMArmor protections during system resume from a standby state, potentially resulting in a loss of confidentiality and integrity.
Weakness classification
- CWE-862: Missing Authorization