Lucene search
+L

996 matches found

CNVD
CNVD
•added 2025/11/25 12:00 a.m.•11 views

AMD StoreMI Default Privilege Misconfiguration Vulnerability

AMD StoreMI is an intelligent storage management technology developed by AMD that automatically optimizes the location of data storage to improve system performance by combining the benefits of solid state drives SSDs and mechanical hard drives HDDs. AMD StoreMI suffers from a default privilege...

7.3CVSS7.7AI score0.00145EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/11/24 9:31 p.m.•16 views

EUVD-2025-198996

Improper return value within AMD uProf can allow a local attacker to bypass KSLR, potentially resulting in loss of confidentiality or availability...

7.1CVSS6.1AI score0.00125EPSS
SaveExploits0References2
OSV
OSV
•added 2025/11/24 9:16 p.m.•13 views

CVE-2025-48510

Improper return value within AMD uProf can allow a local attacker to bypass KSLR, potentially resulting in loss of confidentiality or availability...

7.1CVSS5.8AI score0.00125EPSS
SaveExploits0References1
OSV
OSV
•added 2025/11/24 9:16 p.m.•12 views

CVE-2025-29933

Improper input validation within AMD uProf can allow a local attacker to write out of bounds, potentially resulting in a crash or denial of service...

5.5CVSS5.8AI score0.0011EPSS
SaveExploits0References1
NVD
NVD
•added 2025/11/24 9:16 p.m.•16 views

CVE-2025-29933

Improper input validation within AMD uProf can allow a local attacker to write out of bounds, potentially resulting in a crash or denial of service...

5.5CVSS0.0011EPSS
SaveExploits0References1
CVE
CVE
•added 2025/11/24 8:56 p.m.•32 views

CVE-2025-48510

CVE-2025-48510 concerns AMD uProf, where an improper return value mishandling in a component of the AMD μProf tool can allow a local attacker to bypass KSLR, potentially compromising confidentiality or availability. The publicly cited sources describe a local-access vulnerability affecting uProf;...

7.1CVSS5.8AI score0.00125EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2025/11/24 12:00 a.m.•15 views

PT-2025-47966

Name of the Vulnerable Software and Affected Versions AMD uProf affected versions not specified Description An improper return value within AMD uProf can allow a local attacker to bypass KSLR, potentially resulting in loss of confidentiality or availability. KSLR stands for Kernel Security Level...

7.1CVSS5.8AI score0.00125EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2025/11/24 12:00 a.m.•12 views

AMD uProf 安全漏洞

AMD uProf is a suite of performance analysis tools from AMD for analyzing the performance of x86 architecture applications on Windows, Linux and FreeBSD systems. AMD uProf suffers from an improper input validation vulnerability that can be exploited by an attacker to cause an out-of-bounds write...

5.5CVSS6.9AI score0.0011EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/11/24 12:00 a.m.•18 views

AMD uProf 安全漏洞

AMD uProf is a suite of performance analysis tools from AMD for analyzing the performance of x86 architecture applications on Windows, Linux and FreeBSD systems. AMD uProf suffers from an improper input validation vulnerability that can be exploited by an attacker to write to arbitrary physical...

5.5CVSS6.7AI score0.0011EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/11/23 6:30 p.m.•15 views

EUVD-2024-19529

Incorrect default permissions in AMD StoreMI™ could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution...

7.3CVSS7.5AI score0.00145EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/11/23 4:27 p.m.•10 views

CVE-2024-21923

Incorrect default permissions in AMD StoreMI™ could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution...

7.3CVSS6.5AI score0.00145EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/11/23 12:00 a.m.•18 views

PT-2025-47850

Name of the Vulnerable Software and Affected Versions AMD StoreMI affected versions not specified Description A configuration issue with default permissions in AMD StoreMI could allow an attacker to escalate privileges, potentially leading to arbitrary code execution. Recommendations At the momen...

7.3CVSS6.1AI score0.00145EPSS
SaveExploits0References8
EUVD
EUVD
•added 2025/11/21 9:30 p.m.•15 views

EUVD-2025-198504

Improper input validation within AMD uprof can allow a local attacker to overwrite MSR registers, potentially resulting in crash or denial of service...

5.5CVSS6.1AI score0.0011EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/11/21 9:30 p.m.•15 views

EUVD-2025-198507

A bug within some AMD CPUs could allow a local admin-privileged attacker to run a SEV-SNP guest using stale TLB entries, potentially resulting in loss of data integrity...

5.3CVSS6AI score0.00109EPSS
SaveExploits0References2
NVD
NVD
•added 2025/11/21 7:15 p.m.•16 views

CVE-2025-48502

Improper input validation within AMD uprof can allow a local attacker to overwrite MSR registers, potentially resulting in crash or denial of service...

5.5CVSS0.0011EPSS
SaveExploits0References1
OSV
OSV
•added 2025/11/21 7:15 p.m.•14 views

UBUNTU-CVE-2025-29934

A bug within some AMD CPUs could allow a local admin-privileged attacker to run a SEV-SNP guest using stale TLB entries, potentially resulting in loss of data integrity...

5.3CVSS5.8AI score0.00109EPSS
SaveExploits0References3
CVE
CVE
•added 2025/11/21 6:52 p.m.•82 views

CVE-2025-62626

CVE-2025-62626 describes an entropy mishandling issue in AMD CPUs that can cause the RDSEED instruction to return less random values. The vulnerability is discussed across multiple connected advisories indicating a local attacker could influence randomness, with potential implications for cryptog...

7.2CVSS7.3AI score0.0017EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/11/21 6:52 p.m.•7 views

CVE-2025-62626

Improper handling of insufficient entropy in the AMD CPUs could allow a local attacker to influence the values returned by the RDSEED instruction, potentially resulting in the consumption of insufficiently random values...

7.2CVSS7.3AI score0.0017EPSS
SaveExploits0References1
CVE
CVE
•added 2025/11/21 6:45 p.m.•59 views

CVE-2025-29934

Summary: CVE-2025-29934 is associated with AMD CPUs and SEV-SNP, where an attacker with local admin privileges could abuse stale TLB entries to run a SEV-SNP guest, potentially causing data integrity loss. The vulnerability is described across multiple sources (NVD, EUVD, CNVD, OSV, Debian, Ubunt...

5.3CVSS5.8AI score0.00109EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/11/21 6:45 p.m.•35 views

CVE-2025-29934

A bug within some AMD CPUs could allow a local admin-privileged attacker to run a SEV-SNP guest using stale TLB entries, potentially resulting in loss of data integrity...

5.3CVSS0.00109EPSS
SaveExploits0References1
Rows per page
Query Builder