CVE-2025-62628CWE-427

CVE-2025-62628

published May 14, 2026

CVSS
7.0
EPSS
0%
Percentile
1.2
In the wild
Unconfirmed
What it is

Unsafe OpenSSL initialization within some AMD optional tools may allow a local user-privileged attacker to inject a malicious DLL, potentially resulting in arbitrary code execution.

The record
Technical detail
CVSS
7.0 · NONE
CVSS v4.0
Not supplied
EPSS
0.00109 · 1.2th percentile
Weakness
CWE-427 · Uncontrolled Search Path Element
Published
2026-05-14T19:16Z
References (1)
https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-9024.html · [email protected]
EPSS history
Timeline
  • 14 MAY 14:29Z
    Unsafe OpenSSL initialization within some AMD optional tools may allow a local user-privileged attacker to inject a malicious DLL, potentially resulting in…
    cvelistv5