CVE-2024-36333
published 2026-05-15CVE-2024-36333: A DLL hijacking vulnerability in the AMD Cleanup Utility could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code…
PriorityP342high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.12%
2.1th percentile
A DLL hijacking vulnerability in the AMD Cleanup Utility could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| amd | cleanup_utility | — | — |
| amd | radeon_software | < 26.q1 | 26.q1 |
| amd | radeon_software | < 25.q3.1 | 25.q3.1 |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvdv4.07.0HIGHCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-hvrx-7h2h-759x: A DLL hijacking vulnerability in the AMD Cleanup Utility could allow an attacker to achieve privilege escalation potentially resulting in arbitrary co
ghsa_unreviewed·2026-05-15
CVE-2024-36333 [HIGH] CWE-427 GHSA-hvrx-7h2h-759x: A DLL hijacking vulnerability in the AMD Cleanup Utility could allow an attacker to achieve privilege escalation potentially resulting in arbitrary co
A DLL hijacking vulnerability in the AMD Cleanup Utility could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution.
VulDB
AMD Radeon RX 5000 Graphics Products AMD Cleanup Utility uncontrolled search path
vuldb·2026-05-15·CVSS 7.0
CVE-2024-36333 [HIGH] AMD Radeon RX 5000 Graphics Products AMD Cleanup Utility uncontrolled search path
A vulnerability was found in AMD Radeon RX 5000 Graphics Products, Radeon PRO W5000 Graphics Products, Radeon RX 6000 Graphics Products, Radeon RX 7000 Graphics Products, Cleanup Utility, Radeon PRO W6000 Graphics Products, Radeon PRO W7000 Graphics Products, Radeon RX Vega Graphics Cards, Radeon VII, Radeon PRO WX 8000, 9000 Graphics Cards and Radeon PRO VII and classified as problematic. This affects an unknown function of the component AMD Cleanup Utility. Such manipulation leads to uncontrolled search path.
This vulnerability is referenced as CVE-2024-36333. The attack can only be performed from a local environment. No exploit is available.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-05-15
Published