CVE-2026-0480: AMD Secure Encrypted Virtualization (SEV) firmware vulnerability

Published Nov 10, 2026

Updated

Missing Authentication for Critical Function in AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to forge SEV-TIO guest request messages potentially compromising SEV-SNP guest memory integrity and confidentiality.

Affected Software

1 affected component

AMD Secure Encrypted Virtualization (SEV) firmware

Event History

Nov 10, 2026

CVE Published

via MITRE·10:12 PM

Data Sourced

via MITRE·10:12 PM

DescriptionWeakness

Frequently Asked Questions

What level of attacker control is required?

The attacker must control a malicious hypervisor. The issue concerns the hypervisor's ability to forge SEV-TIO guest request messages.

What is the potential impact on an affected guest?

A successful attack could compromise the integrity and confidentiality of SEV-SNP guest memory.

CVE-2026-0480: AMD Secure Encrypted Virtualization (SEV) firmware vulnerability

Affected Software

Event History

Frequently Asked Questions

What level of attacker control is required?

What is the potential impact on an affected guest?

Company

Resources

Contact

Frequently Asked Questions

What level of attacker control is required?

What is the potential impact on an affected guest?