AU
Product
Amd Uprof
8
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 1High 4Medium 3Low 0
Watch
Add Amd Uprof to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-26334 | 9.9 | Dec 1 | The AMDPowerProfiler.sys driver of AMD μProf tool may allow lower privileged users to access MSRs in kernel which may lead to privilege escalation and ring-0 code execution by the… Affected: before 3.4.494; before 3.4.502 |
| CVE-2023-31349 | 7.8 | Aug 13 | Incorrect default permissions in the AMD μProf installation directory could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution Affected: before 3.4.494 |
| CVE-2023-20562 | 7.8 | Aug 8 | Insufficient validation in the IOCTL (Input Output Control) input buffer in AMD uProf may allow an authenticated user to load an unsigned driver potentially leading to arbitrary… Affected: before 4.1.396; before 4.1-424 |
| CVE-2022-27674 | 7.5 | Nov 9 | Insufficient validation in the IOCTL input/output buffer in AMD μProf may allow an attacker to bypass bounds checks potentially leading to a Windows kernel crash resulting in… Affected: before 3.6.549; before 3.6.839; before 3.6.449 |
| CVE-2022-23831 | 7.5 | Nov 9 | Insufficient validation of the IOCTL input buffer in AMD μProf may allow an attacker to send an arbitrary buffer leading to a potential Windows kernel crash resulting in denial of… Affected: before 3.6.549; before 3.6.839; before 3.6.449 |
| CVE-2023-31341 | 5.5 | Aug 13 | Insufficient validation of the Input Output Control (IOCTL) input buffer in AMD μProf may allow an authenticated attacker to cause an out-of-bounds write, potentially causing a… Affected: before 4.2 |
| CVE-2023-20561 | 5.5 | Aug 8 | Insufficient validation of the IOCTL (Input Output Control) input buffer in AMD μProf may allow an authenticated user to send an arbitrary address potentially resulting in a… Affected: before 4.1.396; before 4.1-424 |
| CVE-2023-20556 | 5.5 | Aug 8 | Insufficient validation of the IOCTL (Input Output Control) input buffer in AMD μProf may allow an authenticated user to send an arbitrary buffer potentially resulting in a… Affected: before 4.1.396; before 4.1-424 |
Showing 8
