UP
Product
Uprof
11
CVEs
0
On KEV
7.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 3Medium 8Low 0
Watch
Add Uprof to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-31349 | 7.8 | Aug 13 | Incorrect default permissions in the AMD μProf installation directory could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution Affected: before 4.1.424; before 4.2.816; before 4.2.845 |
| CVE-2023-31348 | 7.8 | Aug 13 | A DLL hijacking vulnerability in AMD μProf could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution Affected: before 4.1.424; before 4.2.816; before 4.2.845 |
| CVE-2025-48510 | 7.1 | Nov 24 | Improper return value within AMD uProf can allow a local attacker to bypass KSLR, potentially resulting in loss of confidentiality or availability Affected: before 5.0.1174; before 5.0.1223; before 5.0.1479 |
| CVE-2024-36340 | 6.6 | May 13 | A junction point vulnerability within AMD uProf can allow a local low-privileged attacker to create junction points, potentially resulting in arbitrary file deletion or… Affected: before 5.0.1174; before 5.0.1223; before 5.0.1479 |
| CVE-2026-28237 | 5.5 | Jun 9 | Unrestricted resource allocation in AMD uProf may be exploitable to consume excessive system resources, potentially leading to a loss of availability Affected: before 5.3.518; before 5.3.518; before 5.3.518 |
| CVE-2026-0466 | 5.5 | Jun 9 | Improper access control in AMD uProf may allow a local attacker with user privileges to write to the kernel-shared memory section, potentially resulting in crash or denial of… Affected: before 5.3.518; before 5.3.518; before 5.3.518 |
| CVE-2025-48511 | 5.5 | Nov 24 | Improper input validation within AMD uprof can allow a local attacker to write to an arbitrary physical address, potentially resulting in crash or denial of service Affected: before 5.0.1174; before 5.0.1223; before 5.0.1479 |
| CVE-2025-29933 | 5.5 | Nov 24 | Improper input validation within AMD uProf can allow a local attacker to write out of bounds, potentially resulting in a crash or denial of service Affected: before 5.1.576; before 5.1.663; before 5.1.701 |
| CVE-2025-48502 | 5.5 | Nov 21 | Improper input validation within AMD uprof can allow a local attacker to overwrite MSR registers, potentially resulting in crash or denial of service Affected: before 5.0.1174; before 5.0.1223; before 5.0.1479 |
| CVE-2023-31366 | 5.5 | Aug 13 | Improper input validation in AMD μProf could allow an attacker to perform a write to an invalid address, potentially resulting in denial of service Affected: before 4.1.424; before 4.2.816; before 4.2.845 |
| CVE-2023-31341 | 5.5 | Aug 13 | Insufficient validation of the Input Output Control (IOCTL) input buffer in AMD μProf may allow an authenticated attacker to cause an out-of-bounds write, potentially causing a… Affected: before 4.1.424; before 4.2.816; before 4.2.845 |
Showing 11
