Intel published 42 advisories covering 72 vulnerabilities, including high-severity issues in PROSet/Wireless WiFi software that allow privilege escalation and denial-of-service attacks. Other affected Intel components include Xeon processors (privilege escalation), Data Center Attestation Primitives (information disclosure), Alias Checking Trusted Module for Xeon processors (privilege escalation), TDX (privilege escalation), Active Management Technology (DoS), CSME and SPS (privilege escalation), and others. Medium-severity vulnerabilities were also patched in various AI, machine learning, and hardware-related tools. AMD released five advisories covering a dozen vulnerabilities, including five high-severity flaws in the Vitis development environment that could lead to private key disclosure, privilege escalation, and arbitrary code execution. Additional AMD patches address arbitrary code execution in Ryzen Master Utility, SEV-SNP, and Power Design Manager. No known exploits in the wild have been reported at the time of disclosure.

The vulnerabilities fixed by Intel and AMD can be exploited to escalate privileges, execute arbitrary code, cause denial-of-service conditions, and disclose sensitive information. Such impacts could compromise system integrity, confidentiality, and availability if exploited. The breadth of affected components and products indicates a wide attack surface. However, no active exploitation has been reported so far.

Intel and AMD have released patches addressing these vulnerabilities. Users and administrators should apply the official updates from Intel and AMD promptly to mitigate the risks. Since this is a traditional software/hardware patch scenario, no additional vendor mitigation guidance indicating 'no action required' or 'already mitigated' is provided. Patch status is confirmed by vendor advisories. There is no indication that these are cloud services requiring vendor-side patching.