CVE-2025-54518

HighCVSS 7.0/10Last modified Sep 10, 2026

Description

Improper isolation of shared resources within the CPU operation cache on Zen 2-based products could allow an attacker to corrupt instructions executed at a different privilege level, potentially resulting in privilege escalation.

Metrics

CVSS 3.1 7.0/10CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
May 15, 2026
Last modified
Sep 10, 2026
NVD status
Awaiting Analysis

Related CVEs from 2025

CVE-2025-545197.3A DLL hijacking vulnerability in Doc Nav could allow a local attacker to achieve privilege escalation, potentially resulting in arbitrary coCVE-2025-54526.6A malicious ACAP application can gain access to admin-level service account credentials used by legitimate ACAP applications, leading to potCVE-2025-545208.6Improper Protection Against Voltage and Clock Glitches in FPGA devices, could allow an attacker with physical access to undervolt the platfoCVE-2025-545257.5Mattermost Confluence Plugin version <1.5.0 fails to handle unexpected request body which allows attackers to crash the plugin via constant CVE-2025-545267.8Fuji Electric Monitouch V-SFT-6 is vulnerable to a stack-based buffer overflow while processing a specially crafted project file, which mayCVE-2025-545276.1In JetBrains YouTrack before 2025.2.86935, 2025.2.87167, 2025.3.87341, 2025.3.87344 improper iframe configuration in widget sandbox allowCVE-2025-545288.8In JetBrains TeamCity before 2025.07 a CSRF was possible in GitHub App connection flowCVE-2025-545297.5In JetBrains TeamCity before 2025.07 a CSRF was possible in external OAuth login integrationCVE-2025-545309.8In JetBrains TeamCity before 2025.07 privilege escalation was possible due to incorrect directory permissionsCVE-2025-545319.4In JetBrains TeamCity before 2025.07 path traversal was possible via plugin unpacking on WindowsCVE-2025-545324.3In JetBrains TeamCity before 2025.07 improper access control allowed disclosure of build settings via snapshot dependenciesCVE-2025-545334.3In JetBrains TeamCity before 2025.07 improper access control allowed disclosure of build settings via VCS configuration
CVE-2025-54518: High severity, CVSS 7.0 | Vulnix