CVE-2021-26314

Potential floating point value injection in all supported CPU products, in conjunction with software vulnerabilities relating to speculative execution with incorrect floating point results, may cause the use of incorrect data from FPVI and may result in data leakage.

• CWE-208
• CWE-203

• http://www.openwall.com/lists/oss-security/2021/06/09/2Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2021/06/10/1Exploit, Mailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H36U6CNREC436W6GYO7QUMJIVEA35SCV/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SVA2NY26MMXOODUMYZN5DCU3FXMBMBOB/
• https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1003Vendor Advisory
• http://www.openwall.com/lists/oss-security/2021/06/09/2Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2021/06/10/1Exploit, Mailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H36U6CNREC436W6GYO7QUMJIVEA35SCV/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SVA2NY26MMXOODUMYZN5DCU3FXMBMBOB/
• https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1003Vendor Advisory

Published

Jun 9, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-26308An issue was discovered in the marc crate before 2.0.0 for R…7.5
• CVE-2021-26309Information disclosure in the TeamCity plugin for IntelliJ b…3.3
• CVE-2021-26310In the TeamCity IntelliJ plugin before 2020.2.2.85899, DoS w…7.5
• CVE-2021-26311In the AMD SEV/SEV-ES feature, memory can be rearranged in t…7.2
• CVE-2021-26312Failure to flush the Translation Lookaside Buffer (TLB) of t…5.5
• CVE-2021-26313Potential speculative code store bypass in all supported CPU…5.5
• CVE-2021-26315When the AMD Platform Security Processor (PSP) boot rom load…7.8
• CVE-2021-26316Failure to validate the communication buffer and communicati…7.8
• CVE-2021-26317Failure to verify the protocol in SMM may allow an attacker …7.8
• CVE-2021-26318A timing and power-based side channel attack leveraging the …4.7
• CVE-2021-26319Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2021-26320Insufficient validation of the AMD SEV Signing Key (ASK) in …5.5