CVE-2024-21962
Improper Input Validation in the AMD RAID driver could allow an attacker to point to an arbitrary memory location potentially resulting in privilege escalation and arbitrary code execution.
Scoring
- Severity
- HIGH
- CVSS base score
- 8.6
- CVSS vector
- CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
- EPSS probability
- 0.11%
- CWE
- CWE-1220
- Published
- 2026-05-15
- Last modified
- 2026-05-16
Affected products
- AMD AMD EPYC™ 4005 Series Processors
- AMD AMD EPYC™ 4004 Series Processors
- AMD AMD Ryzen™ Threadripper™ PRO 3000 WX-Series Processors
- AMD AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics
- AMD AMD Ryzen™ Threadripper™ 7000 WX-Series Processors
- AMD AMD Ryzen™ 9000HX Series Processors
- AMD AMD Ryzen™ Threadripper™ PRO 5000 WX-Series Processors
- AMD AMD Ryzen™ 3000 Series Desktop Processors
Weakness type
Related vulnerabilities
- CVE-2026-77480 — SQL Server Elevation of Privilege Vulnerability
- CVE-2026-66814 — Microsoft SQL Server Elevation of Privilege Vulnerability
- CVE-2026-69267 — Windows Connected User Experiences and Telemetry Information Disclosure Vulnerability
- CVE-2026-78216 — AshLua eval read operations can read field-policy-protected fields via aggregates
- CVE-2026-78230 — AshAi aggregate tool can read field-policy-protected fields
- CVE-2026-15431 — HP Support Assistant – Potential Escalation of Privilege
- CVE-2026-78122 — docker-socket-proxy through 0.5.0 Insufficient Access Control Granularity Exposes Container Filesystems
- CVE-2026-40145 — Control protections bypass in BeyondTrust Endpoint Privilege Management (Windows deployment) support utility