CVE-2024-36333

Privilege Escalation via DLL Hijacking in AMD Cleanup Utility

Published May 15, 2026 CVSS 4.0 · 7 High EPSS < 1% KEV · Not listed
Description
A DLL hijacking vulnerability in the AMD Cleanup Utility could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
First Time appeared Amd cleanup Utility
Amd radeon Pro W5500
Amd radeon Pro W5500x
Amd radeon Pro W5700
Amd radeon Pro W5700x
Amd radeon Pro W6300
Amd radeon Pro W6300m
Amd radeon Pro W6400
Amd radeon Pro W6500m
Amd radeon Pro W6600
Amd radeon Pro W6600m
Amd radeon Pro W6600x
Amd radeon Pro W6800
Amd radeon Pro W6800x
Amd radeon Pro W6800x Duo
Amd radeon Pro W6900x
Amd radeon Software
CPEs cpe:2.3:a:amd:cleanup_utility:25.20.00.00:*:*:*:*:*:*:*
cpe:2.3:a:amd:radeon_software:*:*:*:*:pro:*:*:*
cpe:2.3:h:amd:radeon_pro_vii:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_pro_w5500:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_pro_w5500x:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_pro_w5700:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_pro_w5700x:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_pro_w6300:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_pro_w6300m:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_pro_w6400:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_pro_w6500m:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_pro_w6600:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_pro_w6600m:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_pro_w6600x:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_pro_w6800:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_pro_w6800x:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_pro_w6800x_duo:-:*:*:*:*:*:*:*
cpe:2.3:h:amd:radeon_pro_w6900x:-:*:*:*:*:*:*:*
Vendors & Products Amd cleanup Utility
Amd radeon Pro W5500
Amd radeon Pro W5500x
Amd radeon Pro W5700
Amd radeon Pro W5700x
Amd radeon Pro W6300
Amd radeon Pro W6300m
Amd radeon Pro W6400
Amd radeon Pro W6500m
Amd radeon Pro W6600
Amd radeon Pro W6600m
Amd radeon Pro W6600x
Amd radeon Pro W6800
Amd radeon Pro W6800x
Amd radeon Pro W6800x Duo
Amd radeon Pro W6900x
Amd radeon Software
Metrics cvssV3_1

{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}

Type Values Removed Values Added
First Time appeared Amd
Amd amd Cleanup Utility
Amd radeon Pro Vii
Amd radeon Pro W5000 Series
Amd radeon Pro W6000 Series
Amd radeon Pro W7000 Series
Amd radeon Pro Wx 8000 Series
Amd radeon Pro Wx 9000 Series
Amd radeon Rx 5000 Series
Amd radeon Rx 6000 Series
Amd radeon Rx 7000 Series
Amd radeon Rx Vega Series
Amd radeon Vii
Vendors & Products Amd
Amd amd Cleanup Utility
Amd radeon Pro Vii
Amd radeon Pro W5000 Series
Amd radeon Pro W6000 Series
Amd radeon Pro W7000 Series
Amd radeon Pro Wx 8000 Series
Amd radeon Pro Wx 9000 Series
Amd radeon Rx 5000 Series
Amd radeon Rx 6000 Series
Amd radeon Rx 7000 Series
Amd radeon Rx Vega Series
Amd radeon Vii
Type Values Removed Values Added
Title Privilege Escalation via DLL Hijacking in AMD Cleanup Utility
Type Values Removed Values Added
Title DLL Hijacking in AMD Cleanup Utility Enables Privilege Escalation
Weaknesses CWE-444
Type Values Removed Values Added
Weaknesses CWE-427
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Type Values Removed Values Added
Title DLL Hijacking in AMD Cleanup Utility Enables Privilege Escalation
Weaknesses CWE-444
Type Values Removed Values Added
Description A DLL hijacking vulnerability in the AMD Cleanup Utility could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution.
References
Metrics cvssV4_0

{'score': 7, 'vector': 'CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N'}