CVE-2026-28237
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk1th percentile - higher than 1% of all known CVEs
Summary
Unrestricted resource allocation in AMD uProf may be exploitable to consume excessive system resources, potentially leading to a loss of availability.
Risk Assessment
The risk is the potential for a DoS attack by exhausting system resources, which could affect the operation of other applications.
Recommendation
It is recommended to update AMD uProf to the latest version and monitor resource usage for anomalies.
Other vulnerabilities in AMD uProf
See all- CVE-2026-0466Medium
Improper access control in AMD uProf may allow a local attacker with user privileges to write to the kernel-shared memory section, potentially resulting in crash or denial of service.
- CVE-2025-48511Medium
Improper input validation within AMD uprof can allow a local attacker to write to an arbitrary physical address, potentially resulting in crash or denial of service.
- CVE-2025-48510High
An improper return value within AMD uProf can allow a local attacker to bypass KSLR, potentially resulting in loss of confidentiality or availability.
- CVE-2025-29933Medium
Improper input validation in AMD uProf can allow a local attacker to write out of bounds, potentially resulting in a crash or denial of service.
- CVE-2025-48502Medium
Improper input validation within AMD uprof can allow a local attacker to overwrite MSR registers, potentially resulting in crash or denial of service.
Original NVD description (English source)
Unrestricted resource allocation in AMD uProf may be exploitable to consume excessive system resources, potentially leading to a loss of availability.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS