Back Guru3D

AMD Publishes Fixes for Two High-Severity TPM Vulnerabilities

Guru3D • August 13, 2026

Affected products include Ryzen 3000 through Ryzen 9000 processors, selected Ryzen mobile products, Threadripper platforms, EPYC 4004 and 4005 processors and several embedded families. The exact affected firmware and remediation version differ by platform.

AMD began distributing corrected firmware to motherboard and system manufacturers in May 2026. Availability on an individual PC depends on its BIOS or UEFI vendor, meaning users should check support pages for their exact motherboard, notebook or prebuilt system.

TPM firmware is involved in Windows device encryption, measured boot, certificate storage and corporate-attestation systems. A vulnerability does not automatically mean BitLocker or stored keys have been compromised, but machines operating in sensitive environments should receive the updates promptly.

BIOS updates can reset security settings or require access to recovery information. Users relying on BitLocker should verify that their recovery key is available before updating firmware.

Intel Explores Stacking Memory Directly Above Future CPUs

Kioxia and Sandisk Develop 2Tb Ninth-Generation QLC NAND

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

AMD Confirms High-Severity TPM Vulnerabilities in Ryzen Processors AMD has reported two high-severity vulnerabilities in its Trusted Platform Module (TPM) 2.0 implementation, affecting Ryzen processors. The vulnerabilities, identified as CVE-2026-6726 and CVE-2026-6727, have CVSS scores of 8.5 and 8.3, respectively. They can be exploited by sending malicious commands to the TPM from user-mode applications, potentially allowing attackers to read sensitive data or disrupt TPM availability. Affected systems include AMD Ryzen 3000-9000 series desktop CPUs, various Ryzen mobile CPUs, and Threadripper series CPUs. Firmware updates have been provided to motherboard manufacturers to mitigate these vulnerabilities, and users are advised to update their BIOS. The vulnerabilities were discovered by Intel security researchers and reported to the Trusted Computing Group (TCG). The nature of the attacks requires local system access with elevated privileges, limiting their exploitability. AMD has stated that these vulnerabilities were identified before any exploitation occurred. 7 sources 68

Extracted Entities

Companies (1)

AMD