CVE-2026-0465

MediumCVSS 5.6/10Last modified Aug 12, 2026

Description

A Use‑After‑Free (UAF) vulnerability in the AMD Ryzen™ Master Utility Driver could allow a local attacker to access kernel memory, potentially resulting in loss of availability

Metrics

CVSS 4.0 5.6/10

CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weakness enumeration

CWE-416

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

Vendor	Product	Versions
AMD	AMD Ryzen™ Master	—
AMD	AMD Ryzen™ Master Monitoring SDK	—

References

https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-9020.html

Timeline

Published: Aug 11, 2026
Last modified: Aug 12, 2026
NVD status: Awaiting Analysis

Related CVEs from 2026

CVE-2026-04665.5Improper access control in AMD uProf may allow a local attacker with user privileges to write to the kernel-shared memory section, potential CVE-2026-04706.8Null pointer dereference in AMD Embedded SPI Flash driver could allow a local user to potentially cause a loss of availability.CVE-2026-04806.0Missing Authentication for Critical Function in AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to for CVE-2026-04819.2Unrestricted IP address binding in the AMD Device Metrics Exporter (ROCm ecosystem) could allow a remote attacker to perform unauthorized ch CVE-2026-04825.4In AMD Versal™ Adaptive SoC devices, insufficient boundary checks in USB boot mode—when enabled through board modifications—could allow craf CVE-2026-04836.9Stored Cross-Site Scripting (XSS) vulnerability in the PDF file upload functionality of Live Helper Chat, versions prior to 4.72. An attacke CVE-2026-04846.5Due to missing authorization check in SAP NetWeaver Application Server ABAP and SAP S/4HANA, an authenticated attacker could access a specif CVE-2026-04857.5SAP BusinessObjects BI Platform allows an unauthenticated attacker to send specially crafted requests that could cause the Content Managemen CVE-2026-04864.3In ABAP based SAP systems a remote enabled function module does not perform necessary authorization checks for an authenticated user resulti CVE-2026-04878.4SAProuter on Microsoft Windows allows an unauthenticated attacker to load library (DLL) files from an untrusted location, allowing them to e CVE-2026-04889.9An authenticated attacker in SAP CRM and SAP S/4HANA (Scripting Editor) could exploit a flaw in a generic function module call and execute u CVE-2026-04896.1Due to insufficient validation of user-controlled input in the URLs query parameter. SAP Business One Job Service could allow an unauthentic