Amd Uprof vulnerabilities

6 vulnerabilities

Known vulnerabilities in Amd Uprof, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9.9CVE-2021-26334amdamd_uprof+1
EPSS score
1.21%
The AMDPowerProfiler.sys driver of AMD μProf tool may allow lower privileged users to access MSRs in kernel which may lead to privilege escalation and ring-0 code execution by the lower privileged user.
7.5CVE-2022-27674amdamd µprof+1
EPSS score
0.74%
Insufficient validation in the IOCTL input/output buffer in AMD μProf may allow an attacker to bypass bounds checks potentially leading to a Windows kernel crash resulting in denial of service.
7.5CVE-2022-23831amdamd µprof+1
EPSS score
0.71%
Insufficient validation of the IOCTL input buffer in AMD μProf may allow an attacker to send an arbitrary buffer leading to a potential Windows kernel crash resulting in denial of service.
5.5CVE-2023-20561amdamd_uprof+1
EPSS score
0.27%
Insufficient validation of the IOCTL (Input Output Control) input buffer in AMD μProf may allow an authenticated user to send an arbitrary address potentially resulting in a Windows crash leading to denial of service.
5.5CVE-2023-20556amdamd_uprof+1
EPSS score
0.27%
Insufficient validation of the IOCTL (Input Output Control) input buffer in AMD μProf may allow an authenticated user to send an arbitrary buffer potentially resulting in a Windows crash leading to denial of service.
7.8CVE-2023-20562amdamd_uprof+1
EPSS score
0.98%
Insufficient validation in the IOCTL (Input Output Control) input buffer in AMD uProf may allow an authenticated user to load an unsigned driver potentially leading to arbitrary kernel execution.