CVE-2025-0027: Medium severity AMD Secure Encrypted Virtualization (SEV) firmware vulnerability

Published Nov 10, 2026

Updated

Improper access control in AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to bypass Reverse Map Table (RMP) protections, potentially impacting the integrity of Secure Encrypted Virtualization-Secure Nested Paging (SEV-SNP) guest memory.

Affected Software

1 affected component

AMD Secure Encrypted Virtualization (SEV) firmware

Event History

Nov 10, 2026

CVE Published

via MITRE·09:45 PM

Data Sourced

via MITRE·09:45 PM

DescriptionWeakness

Data Sourced

via NVD·10:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Which environments are relevant to this issue?

The issue is relevant to deployments using AMD SEV-SNP, because the stated impact concerns the integrity of SEV-SNP guest memory. The affected component is AMD SEV firmware.

What access would an attacker need?

The described attacker is a malicious hypervisor capable of targeting RMP protections. The supplied CVSS vector also identifies a local attack vector and high privileges requirement.

CVE-2025-0027: Medium severity AMD Secure Encrypted Virtualization (SEV) firmware vulnerability

Affected Software

Event History

Frequently Asked Questions

Which environments are relevant to this issue?

What access would an attacker need?

Company

Resources

Contact

Frequently Asked Questions

Which environments are relevant to this issue?

What access would an attacker need?