CVE-2024-36340 MEDIUM

CVE-2024-36340

Weakness CWE-1386

Published May 13, 2025

Last update May 13, 2025

View on NVD All CVEs

CVSS base score

6.6/10

Attack vector Local

Attack complexity Low

Privileges required Low

User interaction Required

Confidentiality High

Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N

What the vulnerability does

01Description

A junction point vulnerability within AMD uProf can allow a local low-privileged attacker to create junction points, potentially resulting in arbitrary file deletion or disclosure.

Key dates

02Disclosure timeline

May 13, 2025 CVE published

May 13, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2024-36340 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/1386.html

Related vulnerabilities

CVE-2024-36340

01Description

02Disclosure timeline

03References

04Related CVE