AMD Aim-T Manageability Service vulnerabilities

2 CVEs affecting AMD Aim-T Manageability Service, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-62628, published 2026-05-14.

More from AMD.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2024-36321, published 2025-05-13. High severity, CVSS 7.3. EPSS: 0.2% chance of exploitation in the next 30 days. Unquoted search path within AIM-T Manageability Service can allow a local attacker to escalate privileges, potentially resulting in arbitrary code execution.
• CVE-2025-62628, published 2026-05-14. High severity, CVSS 7.0. EPSS: 0.1% chance of exploitation in the next 30 days. Unsafe OpenSSL initialization within some AMD optional tools may allow a local user-privileged attacker to inject a malicious DLL, potentially resulting in arbitrary code execution.