Описание
A DLL hijacking vulnerability in the AMD Cleanup Utility could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution.
Затрагиваемое ПО
Amd Radeon softwareAmd Radeon pro viiAmd Radeon pro w5500Amd Radeon pro w5500xAmd Radeon pro w5700Amd Radeon pro w5700xAmd Radeon pro w6300Amd Radeon pro w6300mAmd Radeon pro w6400Amd Radeon pro w6500mAmd Radeon pro w6600Amd Radeon pro w6600mAmd Radeon pro w6600xAmd Radeon pro w6800Amd Radeon pro w6800xAmd Radeon pro w6800x duoAmd Radeon pro w6900xAmd Cleanup utility
CVSS
| Балл | 7.8 — высокая |
| Вектор | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Источники
https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-6027.html