High severity · published May 14, 2026
CVE-2025-62628
Unsafe OpenSSL initialization within some AMD optional tools may allow a local user-privileged attacker to inject a malicious DLL, potentially resulting in arbitrary code…
7.0
CVSS
0.1%
EPSS
No
On KEV
Description
Unsafe OpenSSL initialization within some AMD optional tools may allow a local user-privileged attacker to inject a malicious DLL, potentially resulting in arbitrary code execution.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 1% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AM
AIM-T Manageability Service · AMD
All versions, or not specified · source: vendor
AC
AMD Cloud Manageability Service (ACMS) · AMD
All versions, or not specified · source: vendor
AM
AMD Manageability API · AMD
All versions, or not specified · source: vendor
AM
AMD Management Console (AMC) · AMD
All versions, or not specified · source: vendor
AM
AMD Management Plug-In for SCCM · AMD
All versions, or not specified · source: vendor
DC
DASH CLI - Command Line Application · AMD
All versions, or not specified · source: vendor
