Intel and AMD on Tuesday announced patches for a total of more than 80 vulnerabilities across their products.
Intel has published 42 new advisories covering 72 vulnerabilities.
The company patched several high-severity flaws in PROSet/Wireless WiFi software that could allow an attacker to escalate privileges or conduct a denial-of-service (DoS) attack.
In addition, high-severity vulnerabilities have been addressed in Xeon processors (privilege escalation), Data Center Attestation Primitives (information disclosure), Alias Checking Trusted Module for Xeon processors (privilege escalation), TDX (privilege escalation), Active Management Technology (DoS), PROSet/Wireless WiFi software (local code execution, privilege escalation and DoS), and CSME and SPS (privilege escalation).
Medium-severity issues have been patched by Intel in Transfer Learning Tool, Extension for PyTorch, LLM-on-Ray, Gaudi Container Runtime, Performance Counter Monitor, vLLM Hardware Plugin for Gaudi, Approximate Bayesian Inference Framework, Hardware Aware Automated Machine Learning, EquiTriton Software, and Workload Services Framework products.
Medium vulnerabilities have also been resolved in LLM Scaler, LLM Library and oneCCL Bindings for PyTorch, TDX DCAP and Guest, AI Containers, Cluster Management Toolkit for Kubernetes, Open VKL, Extension for TensorFlow, NPU Drivers, Neural Compressor, Battery Life Diagnostic Tool, Xeon and Core Ultra, UEFI Reference BIOS, AI Reference Models, CSME, and SPS products.
These security holes can be exploited for privilege escalation, DoS, and information disclosure.
Intel has fixed a low-severity vulnerability in Slim Bootloader.
AMD published five new advisories on Tuesday to inform customers about a dozen vulnerabilities.
One advisory describes five high-severity issues in the Vitis development environment. Their exploitation could lead to private key disclosure, privilege escalation, and arbitrary code execution.
Arbitrary code execution issues have also been addressed by AMD in Ryzen Master Utility, SEV-SNP, and Power Design Manager.
Earlier this month, the chipmaker informed customers about a Safe RET interrupt vulnerability and a recently disclosed SEV attack method dubbed PowerHooK.
Related: Chipmaker Patch Tuesday: Intel and AMD Patch 70 Vulnerabilities
Related: ICS Patch Tuesday: Vulnerabilities Fixed by Siemens, Schneider, Phoenix Contact
Related: August 2026 Patch Tuesday: Microsoft Fixes 421 CVEs, One Exploited Zero-Day
