Amd Uprof (Amd) - vulnerabilities (CVEs)

8 CVEs, 0 in the last 30 days, 3 known versions, newest CVE from 2024-08-13. Vendor: Amd.

CVEs of Amd Uprof

• CVE-2023-31349 - CVSS 7.8 (high), 2024-08-13: Incorrect default permissions in the AMD μProf installation directory could allow an attacker to achieve privilege escalation, potentially resulting in…
• CVE-2023-31341 - CVSS 7.3 (high), 2024-08-13: Insufficient validation of the Input Output Control (IOCTL) input buffer in AMD μProf may allow an authenticated attacker to cause an out-of-bounds write,…
• CVE-2023-20561 - CVSS 5.5 (medium), 2023-08-08: Insufficient validation of the IOCTL (Input Output Control) input buffer in AMD μProf may allow an authenticated user to send an arbitrary address potentially…
• CVE-2023-20556 - CVSS 5.5 (medium), 2023-08-08: Insufficient validation of the IOCTL (Input Output Control) input buffer in AMD μProf may allow an authenticated user to send an arbitrary buffer potentially…
• CVE-2023-20562 - CVSS 7.8 (high), 2023-08-08: Insufficient validation in the IOCTL (Input Output Control) input buffer in AMD uProf may allow an authenticated user to load an unsigned driver potentially…
• CVE-2022-27674 - CVSS 7.5 (high), 2022-11-09: Insufficient validation in the IOCTL input/output buffer in AMD μProf may allow an attacker to bypass bounds checks potentially leading to a Windows kernel…
• CVE-2022-23831 - CVSS 7.5 (high), 2022-11-09: Insufficient validation of the IOCTL input buffer in AMD μProf may allow an attacker to send an arbitrary buffer leading to a potential Windows kernel crash…
• CVE-2021-26334 - CVSS 9.9 (critical), 2021-12-01: The AMDPowerProfiler.sys driver of AMD μProf tool may allow lower privileged users to access MSRs in kernel which may lead to privilege escalation and ring-0…