CVE-2026-0432

Privilege Escalation via Incorrect Permissions in AMD Chipset Driver Installation Directory

Published May 15, 2026 CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed
Description
Incorrect default permissions in the installation directory for the AMD chipset driver could allow an attacker to achieve privilege escalation resulting in arbitrary code execution.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Type Values Removed Values Added
Title Privilege Escalation via Incorrect Permissions in AMD Chipset Driver Installation Directory
Type Values Removed Values Added
Description Incorrect default permissions in the installation directory for the AMD chipset driver could allow an attacker to achieve privilege escalation resulting in arbitrary code execution.
Weaknesses CWE-276
References
Metrics cvssV4_0

{'score': 8.5, 'vector': 'CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N'}

Subscriptions

No data.

Weaknesses

Sources

Status
PUBLISHED
Assigner
AMD
Published
Updated
May 16, 2026, 3:56 AM
Reserved
Dec 6, 2025, 1:53 PM
Status
Awaiting Analysis
Published
May 15, 2026, 2:16 AM
Modified
Oct 25, 2026, 11:10 PM