CVE-2021-26334

9.9 criticalEPSS 1.2%

Critical (9.9) in amd amd uprof. EPSS 1.2% chance of exploitation in the next 30 days.

The AMDPowerProfiler.sys driver of AMD μProf tool may allow lower privileged users to access MSRs in kernel which may lead to privilege escalation and ring-0 code execution by the lower privileged user.

Severity

CVSS 3.1

9.9 critical

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

EPSS: 1.2% chance of exploitation in the next 30 days; higher than 68% of CVEs (scores of 2026-10-31)
CWE: CWE-284
Published: 2021-12-01
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

amd:amd_uprof

References

https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1016
https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1016

Check your stack JSON