CVE-2025-54512

A DLL hijacking vulnerability within the AMD Ryzen Master installation could allow a local user-privileged attacker to escalate privileges, potentially resulting in arbitrary code execution...

CVE-2025-8087

CVE-2025-8087 describes a DLL hijacking vulnerability in AMD Power Design Manager. The issue allows a malicious local attacker to escalate privileges during the uninstallation process, potentially enabling arbitrary code execution. Affected component is AMD Power Design Manager; root cause is DLL...

CVE-2025-8087

A DLL hijacking vulnerability in AMD Power Design Manager could allow a malicious local attacker to escalate privileges during the uninstallation process, potentially resulting in arbitrary code execution...

EUVD-2025-210695

A DLL hijacking vulnerability in AMD Power Design Manager could allow a malicious local attacker to escalate privileges during the uninstallation process, potentially resulting in arbitrary code execution...

CVE-2025-8087

A DLL hijacking vulnerability in AMD Power Design Manager could allow a malicious local attacker to escalate privileges during the uninstallation process, potentially resulting in arbitrary code execution...

CVE-2025-48506

Uncontrolled search paths in Vitis™ Unified installation path on local Windows machines could allow DLL injection into these install paths, potentially resulting in arbitrary code execution...

EUVD-2025-210687

Uncontrolled search paths in Vitis™ Unified installation path on local Windows machines could allow DLL injection into these install paths, potentially resulting in arbitrary code execution...

CVE-2025-48506

Uncontrolled search paths in Vitis™ Unified installation path on local Windows machines could allow DLL injection into these install paths, potentially resulting in arbitrary code execution...

CVE-2025-48506

Technical details about CVE-2025-48506 are not publicly available in the provided documents. Monitor for updates from AMD/NVD for affected products, versions, impact, and remediation.

Project CAV3RN continues: Google Apps Script as C2 relay and DNS-based C2 channel selection

Project CAV3RN is a modular espionage framework used against targets in Israel. This report expands on two earlier publications: the first was published in June 2026 as part of our Kaspersky Threat Intelligence Reporting service, and the second was published on Securelist the following month,...

PT-2026-70364

Name of the Vulnerable Software and Affected Versions AMD Power Design Manager affected versions not specified Description A DLL hijacking issue exists where a local attacker can escalate privileges during the uninstallation process. This could lead to arbitrary code execution. DLL hijacking is a...

PT-2026-70362

Name of the Vulnerable Software and Affected Versions Vitis Unified affected versions not specified Description Uncontrolled search paths in the installation path on local Windows machines allow for DLL injection. This occurs when an application searches for a Dynamic Link Library DLL—a shared...

CVE-2025-54512: Uncontrolled Search Path Element

A DLL hijacking vulnerability within the AMD Ryzen Master installation could allow a local user-privileged attacker to escalate privileges, potentially resulting in arbitrary code execution...

CVE-2025-8087: Uncontrolled Search Path Element

A DLL hijacking vulnerability in AMD Power Design Manager could allow a malicious local attacker to escalate privileges during the uninstallation process, potentially resulting in arbitrary code execution...

CVE-2025-48506: Uncontrolled Search Path Element

Uncontrolled search paths in Vitis™ Unified installation path on local Windows machines could allow DLL injection into these install paths, potentially resulting in arbitrary code execution...

PT-2026-70790

A DLL hijacking vulnerability within the AMD Ryzen Master installation could allow a local user-privileged attacker to escalate privileges, potentially resulting in arbitrary code execution...

AMD Ryzen™ Master Vulnerability

CVE Details Refer to Glossary for explanation of terms CVE| CVE Description| CVSS Base Score ---|---|--- CVE-2025-54512| A DLL hijacking vulnerability within the AMD Ryzen™ Master installation may allow a local user-privileged attacker to escalate privileges, potentially resulting in arbitrary co...

AMD Power Design Manager (PDM) Vulnerabilities

CVE Details Refer to Glossary for explanation of terms CVE| CVE Description| CVSS Base Score ---|---|--- CVE-2025-8087| A DLL hijacking vulnerability within AMD Power Design Manager can allow a malicious local attacker to escalate privileges during uninstallation potentially resulting in arbitrar...

Vitis™ Vulnerabilities

CVE Details Refer to Glossary for explanation of terms CVE| CVE Description| CVSS Base Score ---|---|--- CVE-2026-43606| Observable Timing Discrepancy in the Vitis™ Libraries ECDSA secp256k1 component could allow attackers with local access to potentially perform timing analysis or electromagneti...

Installer for LINE for Windows insecurely loads Dynamic Link Libraries

Overview The installer for LINE for Windows provided by LY Corporation contains the following vulnerability: Uncontrolled search path element CWE-427 - CVE-2026-13133 The CVSS evaluation above assumes that a victim user is directed to download and place a specially crafted DLL file alongside the...