CVE-2026-28247: Medium severity AMD Secure Encrypted Virtualization (SEV) firmware vulnerability

Published Nov 10, 2026

Updated

Improper Access Control Applied to Mirrored or Aliased Memory Regions in AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to change the encryption bit for guest context pages potentially resulting in loss of integrity.

Affected Software

1 affected component

AMD Secure Encrypted Virtualization (SEV) firmware

Event History

Nov 10, 2026

CVE Published

via MITRE·10:11 PM

Data Sourced

via MITRE·10:11 PM

DescriptionWeakness

Data Sourced

via NVD·10:18 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Who needs to be able to exploit this issue?

Exploitation requires a malicious hypervisor. The issue affects the handling of guest context pages by AMD SEV firmware.

What is the potential impact on an affected guest?

A malicious hypervisor could change the encryption bit for guest context pages, potentially causing a loss of integrity. The provided information does not indicate confidentiality or availability impact.

CVE-2026-28247: Medium severity AMD Secure Encrypted Virtualization (SEV) firmware vulnerability

Affected Software

Event History

Frequently Asked Questions

Who needs to be able to exploit this issue?

What is the potential impact on an affected guest?

Company

Resources

Contact

Frequently Asked Questions

Who needs to be able to exploit this issue?

What is the potential impact on an affected guest?