Back to Security Bulletins and Briefs InstallShield Privilege Escalation Summary A bug bounty researcher reported a potential privilege escalation affecting AMD products, which AMD identified as originating from Revenera InstallShield 2023 R1. …
… 8.8 High CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H CVE-2025-62624 A heap-based buffer overflow in the ionic cloud driver for VMware ESXi could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution. …
… A local attacker with user-level privileges can place a crafted openssl.cnf file to load an arbitrary Dynamic Link Library DLL, which will be executed with SYSTEM privileges, resulting in local privilege escalation and arbitrary code execution. …
… 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N CVE-2024-36333 A DLL hijacking vulnerability in the AMD Cleanup Utility could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution. …
… CVE Details Refer to Glossary for explanation of terms CVE CVE Description CVSS Score CVE-2025-54502 Incorrect use of boot service in the AMD Platform Configuration Blob APCB SMM driver could allow a privileged attacker with local access Ring 0 to achieve privilege escalation potentially resulting … …
… CVE Details Refer to Glossary for explanation of terms CVE CVE Description CVSS Score CVE-2025-54518 Improper isolation of shared resources within the CPU operation cache on Zen 2-based products could allow an attacker to corrupt instructions executed at a different privilege level, potentially res… …
… CVE Details Refer to Glossary for explanation of terms CVE CVE Description CVSS Score CVE-2024-21962 Improper input validation in the AMD RAID driver could allow an attacker to point to an arbitrary memory location, potentially resulting in privilege escalation and arbitrary code execution. …
… 7.8 High CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 8.5 High CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N CVE-2025-48519 An improper input validation vulnerability within the AMD Platform Management Framework PMF Driver can allow a local attacker to read or write Out-of-Bounds,… …
… CVE Details Refer to Glossary for explanation of terms CVE CVE Description CVSS Score CVE-2026-0432 Incorrect default permissions in the installation directory for the AMD chipset driver could allow an attacker to achieve privilege escalation resulting in arbitrary code execution. …
… CVE Details Refer to Glossary for explanation of terms CVE ID CVE Description CVSS CVE-2021-46747 Insufficient granularity of access control in AMD Secure Processor ASP may allow an attacker with an untrusted user space application to map sensitive System Management Network SMN apertures, potential… …