Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

AlienVault OTX General

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

A System Management Mode (SMM) handler could perform a callout to code located in non-SMM/untrusted memory. A highly privileged attacker could, with active user interaction and under high complexity and present preconditions, trigger execution of attacker-controlled code in SMM, potentially compromising the system’s confidentiality, integrity, and availability.

This vulnerability (CVE-2026-0438) involves a call to a function pointer from an untrusted control sphere within the System Management Mode (SMM) of AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics. The SMM handler may invoke code located in non-SMM memory, which is untrusted. An attacker with high privileges and active user interaction, under complex conditions, could trigger execution of arbitrary code in SMM, potentially compromising system security properties. The CVSS 4.0 vector indicates the attack requires physical proximity (AV:P), high attack complexity (AC:H), privileges (PR:H), and user interaction (UI:A), with high impact on confidentiality, integrity, and availability (C:H/I:H/A:H). No patch or official remediation level has been disclosed by AMD.

Detailed information about CVE-2026-0438: CWE-1072  Call to Function Pointer from Untrusted Control Sphere in SMM in AMD AMD Ryzen™ 7040 Series Mobile Processor

CVE-2026-0438: CWE-1072  Call to Function Pointer from Untrusted Control Sphere in SMM in AMD AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2026-0438: CWE-1072  Call to Function Pointer from Untrusted Control Sphere in SMM in AMD AMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics

Threats Tagged 'cve-2026-0438'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2026-0438'

Lead Pen Test Professional