CVE Intelligence

AMD AMD µProf vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting AMD AMD µProf: 8 record(s), with affected versions and fixes.

CVE-2026-40677 High · 7.7 Jun 12, 2026
The use of insecure HTTP transport within AMD optional tools could allow an attacker to…
The use of insecure HTTP transport within AMD optional tools could allow an attacker to conduct a man-in-the-middle attack, potentially leading to arbitrary code execution.
CVE-2026-28237 Medium · 5.5 CWE-770 Jun 9, 2026
Allocation of Resources Without Limits or Throttling in AMD Uprof
Unrestricted resource allocation in AMD uProf may be exploitable to consume excessive system resources, potentially leading to a loss of availability.
CVE-2026-0466 Medium · 5.5 CWE-497 Jun 9, 2026
Improper access control in AMD uProf may allow a local attacker with user privileges to…
Improper access control in AMD uProf may allow a local attacker with user privileges to write to the kernel-shared memory section, potentially resulting in crash or denial of service.
CVE-2025-61969 High · 7.0 CWE-732 Feb 11, 2026
Incorrect Permission Assignment for Critical Resource in AMD AMD µProf
Incorrect permission assignment in AMD µProf may allow a local user-privileged attacker to achieve privilege escalation, potentially resulting in arbitrary code execution.
CVE-2025-48511 Medium · 5.5 CWE-1285 Nov 24, 2025
Improper input validation within AMD uprof can allow a local attacker to write to an…
Improper input validation within AMD uprof can allow a local attacker to write to an arbitrary physical address, potentially resulting in crash or denial of service.
CVE-2025-48510 High · 7.1 CWE-394 Nov 24, 2025
Improper return value within AMD uProf can allow a local attacker to bypass KSLR…
Improper return value within AMD uProf can allow a local attacker to bypass KSLR, potentially resulting in loss of confidentiality or availability.
CVE-2025-29933 Medium · 5.5 CWE-787 Nov 24, 2025
Out-of-bounds Write in AMD Uprof
Improper input validation within AMD uProf can allow a local attacker to write out of bounds, potentially resulting in a crash or denial of service
CVE-2025-48502 Medium · 5.5 CWE-1285 Nov 21, 2025
Improper input validation within AMD uprof can allow a local attacker to overwrite MSR…
Improper input validation within AMD uprof can allow a local attacker to overwrite MSR registers, potentially resulting in crash or denial of service.