1. Home
  2. Security Center

Security Center

MiTAC Computing follows the principles of Coordinated Vulnerability Disclosure (CVD) . We encourage researchers to disclose newly discovered vulnerabilities in MiTAC hardware, software, or services as soon as they are discovered. We will coordinate with reporters throughout the vulnerability investigation and provide updates on the progress.

Report through Our Vulnerability Disclosure Form

To report a security vulnerability in one of MiTAC's products or services, please submit a vulnerability report through our Vulnerability Disclosure Form.

Report a Vulnerability

Security Center

Security Advisory

Total: 19
 

2025-10-13

SEV-SNP RMP Initialization Vulnerability , Oct. 13, 2025

Description: Researchers from ETHz reported that a malicious hypervisor could corrupt the Reverse Map Table (RMP) during Secure Nested Paging (SNP) initialization.

AMD reproduced the issue and determined it is due to a race condition that can occur while the AMD Secure Processor (ASP) is initializing the RMP. This attack could allow a malicious hypervisor to manipulate the initial RMP content, potentially resulting in loss of SEV-SNP guest memory integrity. AMD has released mitigations for this vulnerability.


AMD-SB-3020
 

Affected Platforms and BIOS version numbers that contain the fix
Details

 

2025-09-22

Branch Predictor Isolation in KVM-QEMU , Sep. 22, 2025

Description: Researchers claim new KVM-QEMU primitives allow exploitation of Spectre V2 resulting in information leakage in various cloud scenarios.

KVM-QEMU is a combination of KVM (Kernel-based Virtual Machine), a Linux kernel module that enables hardware-assisted virtualization and Quick Emulator (QEMU), a generic and open-source machine emulator and virtualizer.

Zen 1-5 architectures are potentially impacted. In conjunction with others in the open-source community, AMD will assist Hypervisor vendors and the Linux Kernel team to introduce mitigations for this issue. Linux published CVE-2025-40300 for this issue.


AMD-SB-7046
 

Affected Platforms and BIOS version numbers that contain the fix
Details

 

2025-08-12

AMD Server Vulnerabilities – August 2025, Aug. 12, 2025

Description: Potential vulnerabilities in AMD EPYC™ Processor platforms that affect IOMMU, AMD Secure Encrypted Virtualization – Secure Nested Paging (SEV-SNP) and other platform components, were found during audits performed internally and by third parties.

Mitigations have been provided in AMD EPYC™ Platform Initialization (PI) firmware packages.


AMD-SB-3014
 

Affected Platforms and BIOS version numbers that contain the fix
Details

 

2025-07-08

AMD Transient Scheduler Attacks, July 08, 2025

Description: AMD discovered several transient scheduler attacks related to the execution timing of instructions under specific microarchitectural conditions while investigating a Microsoft® report titled “Enter, Exit, Page Fault, Leak: Testing Isolation Boundaries for Microarchitectural Leaks”.

AMD has debugged these patterns and identified a speculative side channel affecting AMD CPUs . In some cases, an attacker may be able to use this timing information to infer data from other contexts, resulting in information leakage.


AMD-SB-7029
 

Affected Platforms and BIOS version numbers that contain the fix
Details

 

2025-06-10

AMD SEV Confidential Computing Vulnerability, Jun 10, 2025

Description: Researchers from Google® have provided AMD with information on a potential vulnerability that, if successfully exploited, could lead to the loss of SEV-based protection of a confidential guest.

AMD has made available a mitigation for this issue which requires updating microcode on all impacted platforms to help prevent an attacker from loading malicious microcode. Additionally, an SEV firmware update is required for some platforms to support SEV-SNP attestation. Updating the system BIOS image and rebooting the platform will enable attestation of the mitigation. A confidential guest can verify the mitigation has been enabled on the target platform through the SEV-SNP attestation report.


AMD-SB-3019
 

Affected Platforms and BIOS version numbers that contain the fix
Details

 

2025-06-03

AMD CPU Microcode Signature Verification Vulnerability, Jun 3, 2025

Description: Researchers from Google® have provided AMD with a report titled “AMD Microcode Signature Verification Vulnerability.” This vulnerability may allow an attacker with system administrative privilege to load malicious CPU microcode patches. In the report, the researchers describe how they were able to load patches that were not signed by AMD. The researchers also demonstrate how they falsified signatures for arbitrary microcode patches.

AMD has not received any reports of this attack occurring in any system.

AMD believes this issue is caused by a weakness in signature verification algorithm that could allow an administrator privileged attacker to load arbitrary microcode patches. AMD plans to issue mitigations to fix this issue.


AMD-SB-7033
 

Affected Platforms and BIOS version numbers that contain the fix
Details

 

2025-03-11

AMD SMM Vulnerabilities, Feb. 11 2025

Description: Quarkslab reported vulnerabilities that could allow attackers to execute code within SMM (System Management Mode).

CVE-2024-21925 is the result of a lack of sufficient input buffer(s) validation within the AmdPspP2CmboxV2 UEFI module. CVE-2024-0179 is an SMM (System Management Mode) Callout vulnerability within the AmdCpmDisplayFeatureSMM UEFI module. Both can allow ring-0 attackers to escalate their privileges, potentially resulting in arbitrary code execution. AMD has begun releasing firmware mitigations to fix these vulnerabilities.


AMD-SB-7027
 

Affected Platforms and BIOS version numbers that contain the fix
Details

 

2025-03-11

AMD Embedded Processors Vulnerabilities , Feb. 11 2025

Description: Potential vulnerabilities in AMD Embedded processors were reported, and mitigations are being provided through Platform Initialization (PI) firmware packages.


AMD-SB-5004
 

Affected Platforms and BIOS version numbers that contain the fix
Details

 

2025-03-11

AMD Server Processor Vulnerabilities , Feb. 11 2025

Description: Potential vulnerabilities in the AMD Secure Processor (ASP), AMD Secure Encrypted Virtualization (SEV), AMD Secure Encrypted Virtualization – Secure Nested Paging (SEV-SNP) and other platform components were discovered, and mitigations have been provided in AMD EPYC™ Platform Initialization (PI) firmware packages.


AMD-SB-3009
 

Affected Platforms and BIOS version numbers that contain the fix
Details

 

amd

intel

ami

SUBSCRIBE NOW to get the latest news.

Clicking "OK" confirms your acceptance of our Terms of Use, Privacy Policy, and Cookie Policy.