Read the docs

AMD

Records509All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical29CVSS 9.0–10.0
CVSS high223CVSS 7.0–8.9

Exploited now

AMD records in CISA KEV

No AMD vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

11 records in Uprof · all components

Priority LOW 35

Incorrect default permissions in the AMD μProf installation directory could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00157 Published 2024-08-13 Fixed in 3.4.494 CWE-276
Priority LOW 35

A DLL hijacking vulnerability in AMD μProf could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00182 Published 2024-08-13 Fixed in 3.4.494 CWE-400
TI-2023-15002 CVE-2023-31341 · GHSA-c87h-375h-xrrv

Improper access control in AMD μProf Tool

Priority LOW 33

Insufficient validation of the Input Output Control (IOCTL) input buffer in AMD μProf may allow an authenticated attacker to cause an out-of-bounds write, potentially causing a Windows® OS crash, resulting in denial of s…

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00134 Published 2024-08-13 Fixed in 3.4.494 CWE-284
Priority LOW 29

Unrestricted resource allocation in AMD uProf may be exploitable to consume excessive system resources, potentially leading to a loss of availability.

CVSS 4.0MEDIUM 6.8 Local Low privileges No interaction EPSS 0.00098 Published 2026-06-09 Fixed in 5.3 CWE-770
TI-2025-21315 CVE-2025-29933 · GHSA-hfcq-p5vj-gm69

Out-of-bounds write in AMD μProf

Priority LOW 24

Improper input validation within AMD uProf can allow a local attacker to write out of bounds, potentially resulting in a crash or denial of service

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00118 Published 2025-11-24 Fixed in uProf 5.1 CWE-787
TI-2023-15020 CVE-2023-31366 · GHSA-g6wf-h667-5899

Improper input validation in AMD μProf Tool

Priority LOW 24

Improper input validation in AMD μProf could allow an attacker to perform a write to an invalid address, potentially resulting in denial of service.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.0015 Published 2024-08-13 Fixed in 3.4.494 CWE-20
Open these records in search →