Original link: AMD: Microcode Signature Verification Vulnerability / Google.
It requires local privs, but still a vulnerability