CVE-2020-8950: AMD User Experience Program

High severity, CVSS 7.8. EPSS: 1% chance of exploitation in the next 30 days.

The AUEPLauncher service in Radeon AMD User Experience Program Launcher through 1.0.0.1 on Windows allows elevation of privilege by placing a crafted file in %PROGRAMDATA%\AMD\PPC\upload and then creating a symbolic link in %PROGRAMDATA%\AMD\PPC\temp that points to an arbitrary folder with an arbitrary file name.

Affected products

• AMD User Experience Program: up to and including 1.0.0.1

Published 2020-02-12. Last modified 2026-06-17.