CVE-2026-105051: Low severity Denuvo Anti-Tamper vulnerability
Published Oct 2, 2026
·Updated
Denuvo Anti-Tamper through 2026-03-04 allows bypass of a hypervisor presence check via CPUID interception (SimpleSvm.sys on AMD; hyperkd.sys and hyperhv.dll on Intel).
Affected Software
1 affected component
Denuvo Anti-Tamper
Event History
Oct 2, 2026
CVE Published
via MITRE·10:59 PM
Data Sourced
via MITRE·10:59 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What access and environment does an attacker need to exploit this issue?
Exploitation requires local access, high privileges, and high attack complexity. The issue is exercised by intercepting CPUID to bypass Denuvo Anti-Tamper's hypervisor presence check.
2
Which platforms or components are involved?
On AMD systems, the described interception uses SimpleSvm.sys. On Intel systems, it uses hyperkd.sys and hyperhv.dll.
3
What is the practical impact after successful exploitation?
The stated impact is a bypass of Denuvo Anti-Tamper's hypervisor presence check. The supplied vector indicates no confidentiality or availability impact and a low integrity impact.