CVE-2025-54509Active Exploitation

MEDIUMCVSS 4.0 · MEDIUM

Exploitation ongoing with high activity in latest observed window (1 mentions)

Immediate actions

Patch affected systems immediately
Assume compromise if assets are exposed
Hunt for exploitation attempts and persistence artifacts
Increase monitoring for publicly documented tradecraft

Recommended action window: Immediate (within 24h)

NVD description

Improper access control for register interface in the Input-Output Memory Management Unit (IOMMU) could allow a privileged attacker to cause non-coherent accesses by the AMD Secure Processor (ASP), potentially resulting in loss of integrity.

Back to dashboard

5.5/ 10 priority

Sources & remediation

Other references

https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-3039.html

Weakness type (CWE)

CWE-1262

Priority

MEDIUM

Exploitation

ACTIVE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Threat summary

Active exploitation appears in 1 classified signals
Public PoC is present in monitored signal
Patch or workaround signal is available
2 mentions across 2 observed days

What's happening

Active exploitation reported across 1 signal
PoC mentioned or linked in 1 signal
Patch or workaround mentioned in 2 signals
Technical details provided in 1 signal
Peaked 1d ago at 1 mentions (2026-06-09); latest day: 1
2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d

Signal classification2 categories

Active Exploitation

150.0%

Patch

150.0%

Referenced assets2 URLs

By indicator

Classification over time

Date	Total	Labels

2026-06-09	1	Active Exploitation1
2026-06-12	1	Patch1

Full discourse2 posts

Shweta Shinde@shw3ta_shinde137d
Active Exploitation
3rd AMD confidential computing attack in 3 months. Staleus (CVE-2025-54509) lets a malicious hypervisor flip a config, desync PSP and CPU memory views, and gain read/write access to a confidential VM. Software-only, 100% success rate. AMD released patches. http://xca-attacks.github.io/staleus
Post summary
The post recounts a third in‑the‑wild exploitation of CVE-2025‑54509, explains how the flaw operates, provides a PoC link, and notes that AMD has released patches.
11020180
1.1K followersView on X
Daily CyberSecurity@the_yellow_fall134d
Patch
Fix critical AMD security vulnerabilities and hardware security flaws now. Learn about CVE-2025-54509 and CVE-2025-10263 updates. #AMD #SecurityVulnerabilities #HardwareSecurityFlaws #CVE202554509 #CVE202510263 https://securityonline.info/amd-security-vulnerabilities/ https://t.co/KIcaAq4JHH
Post summary
The tweet highlights that AMD has released fixes for CVE‑2025‑54509 and CVE‑2025‑10263, directing readers to a vendor advisory for more information.
00020267
12.6K followersView on X

Explore more

Back to dashboard