1. Home
  2. CVE Database
  3. CVE-2021-26334
CRITICAL · 9.9

CVE-2021-26334

The AMDPowerProfiler.sys driver of AMD μProf tool may allow lower privileged users to access MSRs in kernel which may lead to privilege escalation and ring-0 code execution by the lower privileged use...

Vulnerability Description

The AMDPowerProfiler.sys driver of AMD μProf tool may allow lower privileged users to access MSRs in kernel which may lead to privilege escalation and ring-0 code execution by the lower privileged user.

CVSS Score

9.9

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
AmdAmd Uprof< 3.4.494
MicrosoftWindows-
LinuxLinux Kernel-

Related Weaknesses (CWE)

CWE-284

References

FAQ

What is CVE-2021-26334?

CVE-2021-26334 is a vulnerability with a CVSS score of 9.9 (CRITICAL). The AMDPowerProfiler.sys driver of AMD μProf tool may allow lower privileged users to access MSRs in kernel which may lead to privilege escalation and ring-0 code execution by the lower privileged use...

How severe is CVE-2021-26334?

CVE-2021-26334 has been rated CRITICAL with a CVSS base score of 9.9/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2021-26334?

Check the references section above for vendor advisories and patch information. Affected products include: Amd Amd Uprof, Microsoft Windows, Linux Linux Kernel.