CVE-2025-61963

🧮 SecurityWeek: Intel and AMD published over 50 advisories describing over 200 flaws. Count AMD's own listing for 9 and 10 Nov: 31 items (29 bulletins, 2 briefs), 148 CVE entries, 100 unique ids. 27 ids repeat across bulletins; the same 20 sit in three graphics bulletins (derived).

📅 The catch is the date column. AMD-SB-3050, a UEFI flaw that can run code in System Management Mode (CVE-2025-61963, 8.4 by AMD), prints mitigation dates to OEMs from 27 Jun 2025 to 13 Apr 2026, 501 to 211 days before the 10 Nov bulletin (derived). The latest planned target in the set is Apr'27 (SB-3061), and three bulletins print "No fix planned"; SecurityWeek mentions neither.

🧱 The 44 issue graphics bulletin (SB-6028) is real, with ten at 7.0 or more, but 20 of its 44 CVEs also appear in two other bulletins.

🔒 Intel: its own advisory pages could not be read (robots.txt answers 403, so nothing was fetched). One CVE record: CVE-2026-61887, 9.4 Critical by Intel, CWE-304, NVD status Received. Everything else Intel is SecurityWeek's. None of these CVEs is in KEV 2026.11.10.

If the advisory date is the only date in your register, which of these is still open?

🔗 https://t.co/yJ6dECtXzI

#AMD #Intel #UEFI #Firmware #SMM #TDX #Radeon #SecurityBulletin #VulnerabilityManagement #PatchManagement #InfoSec #CyberSecurity #ThreatIntel #HardwareSecurity