CVE-2024-36340: medium-severity vulnerability in AMD μProf
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
AMD uProf has a flaw that allows a low-privileged local user to create junction points (special file system links), which could lead to unintended deletion or exposure of files they shouldn't access.
A junction point vulnerability in AMD uProf enables local low-privileged attackers to create NTFS junction points via improper file system path handling, potentially achieving arbitrary file deletion or information disclosure through directory traversal. Exploitation requires local system access and the ability to interact with the vulnerable application's file operations.
In the same product, most dangerous first.