CVE-2026-0432

HighCVSS 8.5/10Last modified Oct 25, 2026

Description

Incorrect default permissions in the installation directory for the AMD chipset driver could allow an attacker to achieve privilege escalation resulting in arbitrary code execution.

Metrics

CVSS 4.0 8.5/10CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weakness enumeration

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
AMDAMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics—
AMDAMD Ryzen™ 7035 Series Processors with Radeon™ Graphics—
AMDAMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics—
AMDAMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics—
AMDAMD Ryzen™ 7020 Series Processors with Radeon™ Graphics—
AMDAMD Ryzen™ 7045 Series Mobile Processors with Radeon™ Graphics—
AMDAMD Ryzen™ 7000 Series Desktop Processors—
AMDAMD Ryzen™ 3000 Series Desktop Processors—
AMDAMD Ryzen™ Threadripper™ PRO 3000 WX-Series Processors—
AMDAMD Ryzen™ 7030 Series Mobile Processors with Radeon™ Graphics—
AMDAMD Ryzen™ Threadripper™ PRO 3000 WX-Series Processors—
AMDAMD Ryzen™ Threadripper™ 3000 Processors—
AMDAMD Ryzen™ 9000HX Series Processors—
AMDAMD Ryzen™ AI 300 Series Processors—
AMDAMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics—
AMDAMD Ryzen™ Threadripper™ PRO 5000 WX-Series Processors—
AMDAMD Ryzen™ Threadripper™ 7000 Processors—
AMDAMD Ryzen™ Threadripper™ PRO 7000 WX-Series Processors—
AMDAMD Ryzen™ Threadripper™ PRO 7000 WX-Series Processors—
AMDAMD Ryzen™ 8000 Series Desktop Processors—
AMDAMD Ryzen™ 9000 Series Desktop Processors—
AMDAMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics—
AMDAMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics—
AMDAMD Ryzen™ 4000 Series Desktop Processors—
AMDAMD Ryzen™ 5000 Series Desktop Processors—
AMDAMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics—
AMDAMD Ryzen™ 3000 Series Desktop Processors—
AMDAMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics—
AMDAMD Ryzen™ 6000 Series Processors with Radeon™ Graphics—
AMDAMD Ryzen™ AI Max 300 Series Processors—
AMDAMD Ryzen™ AI 400 Series Processors—
AMDAMD Ryzen™ Embedded R1000 Series Processors—
AMDAMD Ryzen™ Embedded R2000 Series Processors—
AMDAMD Ryzen™ Embedded V1000 Series Processors (formerly codenamed "Raven Ridge")—
AMDAMD Ryzen™ Embedded V2000 Series Processors—
AMDAMD EPYC™ Embedded 8004 Series Processors—
AMDAMD Ryzen™ Embedded 8000 Series Processors—
AMDAMD Ryzen™ Embedded 7000 Series Processors—
AMDAMD EPYC™ Embedded 9005 Series Processors—
AMDAMD Ryzen™ Embedded 9000 Series Processors—
AMDAMD EPYC™ 9004 Series Processors—
AMDAMD EPYC™ 7003 Series Processors—
AMDAMD EPYC™ 7002 Series Processors—
AMDAMD EPYC™ 7001 Series Processors—
AMDAMD EPYC™ 4004 Series Processors—
AMDAMD EPYC™ 9005 Series Processors—
AMDAMD Instinct™ MI300A Series Processors—
AMDAMD EPYC™ 9V64H Processor—
AMDAMD EPYC™ 8004 Series Processors—
AMDAMD EPYC™ 4005 Series Processors—

References

Timeline

Published
May 15, 2026
Last modified
Oct 25, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-04356.0Operation on a resource after expiration or release in the AMD Secure Encrypted Virtualization (SEV) firmware could allow an attacker with aCVE-2026-04366.9Insufficient parameter sanitization in the AMD Secure Processor (ASP) trusted execution environment (TEE) SPDM driver could allow an attackeCVE-2026-04385.4A System Management Mode (SMM) handler could perform a callout to code located in non-SMM/untrusted memory. A highly privileged attacker couCVE-2026-04544.6An out-of-bounds write in the AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to corrupt global firmwaCVE-2026-04555.9The Versal™ AI Edge Series Gen 2 Peripheral Protection Unit (XPPU) for the inter-processor interrupt (IPI) buffers does not block unauthorizCVE-2026-04601.0Improper authentication in Bootgen could result in the use of a fixed salt value for RSA padding instead of a randomly generated salt, potenCVE-2026-04617.5Insufficient boundary validation in the USB boot mode implementation of AMD Zynq™ UltraScale+ MPSoC and RFSoC devices could allow unbounded CVE-2026-04655.6A Use‑After‑Free (UAF) vulnerability in the AMD Ryzen™ Master Utility Driver could allow a local attacker to access kernel memory, potentialCVE-2026-04665.5Improper access control in AMD uProf may allow a local attacker with user privileges to write to the kernel-shared memory section, potentialCVE-2026-04706.8Null pointer dereference in AMD Embedded SPI Flash driver could allow a local user to potentially cause a loss of availability.CVE-2026-04806.0Missing Authentication for Critical Function in AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to forCVE-2026-04819.2Unrestricted IP address binding in the AMD Device Metrics Exporter (ROCm ecosystem) could allow a remote attacker to perform unauthorized ch
CVE-2026-0432: High severity, CVSS 8.5 | Vulnix