CVE-2026-84004

MediumCVSS 5.5/10Last modified Nov 11, 2026

Description

Processor optimization removal or modification of security-critical code in AMD Zen allows an authorized attacker to disclose information locally.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-1037

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
Nov 10, 2026
Last modified
Nov 11, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-840055.5Processor optimization removal or modification of security-critical code in AMD Zen allows an authorized attacker to disclose information loCVE-2026-840076.5Out-of-bounds read in Remote Desktop Gateway Service allows an authorized attacker to disclose information over a network.CVE-2026-840087.5Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.CVE-2026-840094.7Time-of-check time-of-use (toctou) race condition in Windows Projected File System allows an authorized attacker to perform tampering locallCVE-2026-84019.8Sandbox escape in the Profile Backup component. This vulnerability was fixed in Firefox 150.0.3, Firefox ESR 115.36, Firefox ESR 140.11, andCVE-2026-840107.5Exposed dangerous method or function in SQL Server allows an authorized attacker to elevate privileges over a network.CVE-2026-840115.5Incorrect authorization in Windows SMB Client allows an authorized attacker to bypass a security feature locally.CVE-2026-840128.1Double free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.CVE-2026-840137.8Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally.CVE-2026-840147.0Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally.CVE-2026-840159.8Heap-based buffer overflow in Remote Access Point-to-Point Protocol (PPP) EAP-TLS allows an unauthorized attacker to execute code over a netCVE-2026-840167.8Out-of-bounds write in Windows EAPHost Service allows an authorized attacker to elevate privileges locally.
CVE-2026-84004: Medium severity, CVSS 5.5 | Vulnix