cve,link,title,description,vendor,products,score,severity,epss,cisa,article,ransomware,exploited,poc,trended,trended_no_1,published,trended_score CVE-2023-31366,https://securityvulnerability.io/vulnerability/CVE-2023-31366,AMD μProf Vulnerability Could Lead to Denial of Service,"An input validation flaw in AMD µProf enables attackers to execute a write operation at an invalid memory address. This vulnerability poses significant security risks, including the potential to cause a denial of service. Organizations utilizing AMD µProf are advised to implement immediate mitigations to prevent possible exploitation and safeguard their systems against unauthorized access and service interruptions.",Amd,Μprof Tool,5.5,MEDIUM,0.0004299999854993075,false,false,false,false,,false,false,2024-08-13T16:57:40.561Z,0 CVE-2023-31349,https://securityvulnerability.io/vulnerability/CVE-2023-31349,Potential Privilege Escalation Vulnerability in AMD μProf Could Lead to Arbitrary Code Execution,"The AMD µProf installation directory features incorrect default permissions that can be exploited by an attacker to escalate their privileges. This unauthorized access could lead to arbitrary code execution, allowing malicious users to gain control over affected systems. Organizations using AMD µProf should review their installation security settings and apply necessary mitigations to prevent potential breaches.",Amd,Μprof Tool,7.8,HIGH,0.0004299999854993075,false,false,false,false,,false,false,2024-08-13T16:57:28.998Z,0 CVE-2023-31348,https://securityvulnerability.io/vulnerability/CVE-2023-31348,Potential DLL Hijacking Vulnerability in AMD μProf Could Lead to Privilege Escalation and Arbitrary Code Execution,"A vulnerability exists within AMD µProf that exploits DLL hijacking techniques, enabling an attacker to escalate privileges. This flaw poses a significant risk as it may lead to arbitrary code execution, thereby compromising the integrity and security of affected systems. Vigilance and immediate action are advised to mitigate the potential implications of this vulnerability.",Amd,Μprof Tool,7.8,HIGH,0.0005300000193528831,false,false,false,false,,false,false,2024-08-13T16:57:16.834Z,0 CVE-2023-31341,https://securityvulnerability.io/vulnerability/CVE-2023-31341,Out-of-Bounds Write Vulnerability in AMD μProf Could Lead to Windows OS Crash and Denial of Service,"An input validation flaw in the Input Output Control (IOCTL) processing of AMD Prof may permit authenticated users to exploit an out-of-bounds write scenario. This exploitation could lead to significant disruptions, including the potential for system crashes on Windows operating systems. Users of impacted AMD products should take immediate steps to evaluate their security posture and apply available mitigations.",Amd,Μprof Tool,5.5,MEDIUM,0.0004299999854993075,false,false,false,false,,false,false,2024-08-13T16:57:07.052Z,0 CVE-2023-20562,https://securityvulnerability.io/vulnerability/CVE-2023-20562," "," Insufficient validation in the IOCTL (Input Output Control) input buffer in AMD uProf may allow an authenticated user to load an unsigned driver potentially leading to arbitrary kernel execution. ",Amd,Μprof,7.8,HIGH,0.0004199999966658652,false,false,false,true,true,false,false,2023-08-08T18:15:00.000Z,0 CVE-2023-20561,https://securityvulnerability.io/vulnerability/CVE-2023-20561," "," Insufficient validation of the IOCTL (Input Output Control) input buffer in AMD μProf may allow an authenticated user to send an arbitrary address potentially resulting in a Windows crash leading to denial of service. ",Amd,Μprof,5.5,MEDIUM,0.0004299999854993075,false,false,false,false,,false,false,2023-08-08T18:15:00.000Z,0 CVE-2023-20556,https://securityvulnerability.io/vulnerability/CVE-2023-20556," "," Insufficient validation of the IOCTL (Input Output Control) input buffer in AMD μProf may allow an authenticated user to send an arbitrary buffer potentially resulting in a Windows crash leading to denial of service. ",Amd,Μprof,5.5,MEDIUM,0.0004299999854993075,false,false,false,false,,false,false,2023-08-08T18:15:00.000Z,0 CVE-2022-27674,https://securityvulnerability.io/vulnerability/CVE-2022-27674,,Insufficient validation in the IOCTL input/output buffer in AMD μProf may allow an attacker to bypass bounds checks potentially leading to a Windows kernel crash resulting in denial of service.,Amd,Amd Μprof,7.5,HIGH,0.0008900000248104334,false,false,false,false,,false,false,2022-11-09T21:15:00.000Z,0 CVE-2022-23831,https://securityvulnerability.io/vulnerability/CVE-2022-23831,,Insufficient validation of the IOCTL input buffer in AMD μProf may allow an attacker to send an arbitrary buffer leading to a potential Windows kernel crash resulting in denial of service.,Amd,Amd Μprof,7.5,HIGH,0.0008900000248104334,false,false,false,false,,false,false,2022-11-09T21:15:00.000Z,0 CVE-2021-26334,https://securityvulnerability.io/vulnerability/CVE-2021-26334,AMD Chipset Driver Information Disclosure Vulnerability,The AMDPowerProfiler.sys driver of AMD μProf tool may allow lower privileged users to access MSRs in kernel which may lead to privilege escalation and ring-0 code execution by the lower privileged user.,Amd,Μprof Tool,9.9,CRITICAL,0.0010400000028312206,false,false,false,false,,false,false,2021-12-01T16:15:00.000Z,0