9.9
CVSSv3

CVE-2021-26334

Published: 01/12/2021 Updated: 07/11/2023
CVSS v2 Base Score: 9 | Impact Score: 10 | Exploitability Score: 8
CVSS v3 Base Score: 9.9 | Impact Score: 6 | Exploitability Score: 3.1
VMScore: 801
Vector: AV:N/AC:L/Au:S/C:C/I:C/A:C

Vulnerability Summary

The AMDPowerProfiler.sys driver of AMD µProf tool may allow lower privileged users to access MSRs in kernel which may lead to privilege escalation and ring-0 code execution by the lower privileged user.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

amd amd_uprof

Recent Articles

AMD reveals an Epyc 50 flaws – 23 of them rated high severity. Intel has 25 bugs, too
The Register • Simon Sharwood, APAC Editor • 12 Nov 2021

Get our weekly newsletter Think of an attack – DoS, arbitrary code execution, memory corruption – and one of these vulns allows it

Microsoft may have given us a mere 55 CVEs to worry about on November's Patch Tuesday, but AMD and Intel have together topped that number with fixes for their products. AMD alone revealed 50 new CVE-listed bugs this week, 23 of them rated of "high" concern, meaning they're rated at between 7.0 and 8.9 on the Common Vulnerability Scoring System. Let's start with the 27 flaws in the AMD Graphics Driver for Windows 10 – 18 of them rated high – because at least they're in software and Microsoft ...