CVE-2021-26334: AMD Uprof

Critical severity, CVSS 9.9. EPSS: 1.2% chance of exploitation in the next 30 days.

The AMDPowerProfiler.sys driver of AMD μProf tool may allow lower privileged users to access MSRs in kernel which may lead to privilege escalation and ring-0 code execution by the lower privileged user.

Affected products

  • AMD AMD Uprof: before 3.4.494 (fixed in 3.4.494); before 3.4.502 (fixed in 3.4.502)

Published 2021-12-01. Last modified 2026-06-17.