Medium severity · published May 14, 2026
CVE-2025-62625
Improper privilege management in the KVM key download component could allow an attacker to swap tokens and download sensitive keys, potentially resulting in unauthorized access to…
6.0
CVSS
0.2%
EPSS
No
On KEV
Description
Improper privilege management in the KVM key download component could allow an attacker to swap tokens and download sensitive keys, potentially resulting in unauthorized access to privileged resources and loss of confidentiality.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 6% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AA
AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics · AMD
All versions, or not specified · source: vendor
AD
AMD Device Management Portal (ADMP) · AMD
All versions, or not specified · source: vendor
AR
AMD Ryzen™ 3000 Series Desktop Processors · AMD
All versions, or not specified · source: vendor
AR
AMD Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics · AMD
All versions, or not specified · source: vendor
AR
AMD Ryzen™ 4000 Series Desktop Processors · AMD
All versions, or not specified · source: vendor
AR
AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics · AMD
All versions, or not specified · source: vendor
AR
AMD Ryzen™ 5000 Series Desktop Processors · AMD
All versions, or not specified · source: vendor
AR
AMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics · AMD
All versions, or not specified · source: vendor
AR
AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics · AMD
All versions, or not specified · source: vendor
AR
AMD Ryzen™ 6000 Series Processors with Radeon™ Graphics · AMD
All versions, or not specified · source: vendor
AR
AMD Ryzen™ 7000 Series Desktop Processors · AMD
All versions, or not specified · source: vendor
AR
AMD Ryzen™ 7020 Series Processors with Radeon™ Graphics · AMD
All versions, or not specified · source: vendor
Affected product
AA
AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics
AMD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-62625
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-62625
www.amd.com
https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-9023.html
More from AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics
8.7
CVE-2025-52533
Improper Access Control in an on-chip debug interface could allow a privileged attacker to enable a debug interface and potentially compromise data confidentiality or integrity
8.6
CVE-2024-21962
Improper Input Validation in the AMD RAID driver could allow an attacker to point to an arbitrary memory location potentially resulting in privilege escalation and arbitrary code…
8.5
CVE-2026-0432
Incorrect default permissions in the installation directory for the AMD chipset driver could allow an attacker to achieve privilege escalation resulting in arbitrary code…
8.3
CVE-2023-31364
Improper handling of direct memory writes in the input-output memory management unit could allow a malicious guest virtual machine (VM) to flood a host with writes, potentially…
7.5
CVE-2025-54502
Incorrect use of boot service in the AMD Platform Configuration Blob (APCB) SMM driver could allow a privileged attacker with local access (Ring 0) to achieve privilege escalation…