CVE-2026-0454: AMD Secure Encrypted Virtualization (SEV) firmware vulnerability

Published Nov 10, 2026

Updated

An out-of-bounds write in the AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to corrupt global firmware variables, potentially resulting in loss of integrity.

Affected Software

1 affected component

AMD Secure Encrypted Virtualization (SEV) firmware

Event History

Nov 10, 2026

CVE Published

via MITRE·10:12 PM

Data Sourced

via MITRE·10:12 PM

DescriptionWeakness

Frequently Asked Questions

What level of control does an attacker need to exploit this issue?

The attacker needs to operate a malicious hypervisor.

What is the potential impact of successful exploitation?

A malicious hypervisor could corrupt global SEV firmware variables, potentially causing a loss of integrity.

CVE-2026-0454: AMD Secure Encrypted Virtualization (SEV) firmware vulnerability

Affected Software

Event History

Frequently Asked Questions

What level of control does an attacker need to exploit this issue?

What is the potential impact of successful exploitation?

Company

Resources

Contact

Frequently Asked Questions

What level of control does an attacker need to exploit this issue?

What is the potential impact of successful exploitation?