PatchSiren cyber security CVE debrief

CVE-2026-28237 AMD CVE debrief

A vulnerability in AMD uProf, tracked as CVE-2026-28237, may allow for unrestricted resource allocation. This could be exploited to consume excessive system resources, potentially leading to a loss of availability. The vulnerability has a CVSS score of 6.8 and is classified as MEDIUM severity.

Vendor: AMD
Product: AMD µProf
CVSS: MEDIUM 6.8
CISA KEV: Not listed in stored evidence
Original CVE published: 2026-06-09
Original CVE updated: 2026-06-09
Advisory published: 2026-06-09
Advisory updated: 2026-06-09

Who should care

Users of AMD uProf should be aware of this vulnerability and take necessary precautions to mitigate potential risks.

Technical summary

The vulnerability is caused by unrestricted resource allocation in AMD uProf. This could allow an attacker to consume excessive system resources, potentially leading to a loss of availability.

Defensive priority

MEDIUM

Recommended defensive actions

Users should review and apply security updates from AMD as they become available.
System administrators should monitor system resources and implement measures to prevent excessive resource consumption.

Evidence notes

The CVE record and NVD detail pages provide additional information about this vulnerability.

Official resources

CVE-2026-28237 was published on 2026-06-09T18:16:37.897Z and modified on 2026-06-09T19:30:24.713Z.