CWE-1301 · Information Disclosure
Insufficient or Incomplete Data Removal within Hardware Component
2CVEs
SortMost likely exploited
2 CVEs with CWE-1301 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2025-12216Malicious / Malformed App can be Installed but not UninstalledAzure Access Technology · BLU-IC2 · CVSS 10 · 2025-10-25 | 10.0 | 0.2% | 2025-10-25 |
| CVE-2025-29946Insufficient or Incomplete Data Removal in Hardware Component in SEV firmware doesn't fully flush IOMMU. This can potentially lead to a loss of confidentiality and integrity in gu…AMD · AMD EPYC™ 9005 Series Processors · CVSS 4.5 · 2026-02-10 | 4.5 | 0.2% | 2026-02-10 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.