CVE-2026-40669: Medium severity AMD Secure Encrypted Virtualization (SEV) firmware vulnerability

Published Nov 10, 2026

Updated

An off-by-one error in AMD Secure Encrypted Virtualization (SEV) firmware could allow an attacker with hypervisor access to corrupt the Reverse Map Table (RMP) table, potentially resulting in loss of guest memory integrity.

Affected Software

1 affected component

AMD Secure Encrypted Virtualization (SEV) firmware

Event History

Nov 10, 2026

CVE Published

via MITRE·10:10 PM

Data Sourced

via MITRE·10:10 PM

DescriptionWeakness

Data Sourced

via NVD·10:18 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Who is realistically exposed to this issue?

Systems using AMD Secure Encrypted Virtualization firmware are exposed if an attacker can obtain hypervisor access. The described impact is corruption of the Reverse Map Table, which can undermine guest memory integrity.

What level of access does an attacker need?

The attacker needs hypervisor access. The supplied severity vector also indicates high privileges are required and no user interaction is required.

What security property is affected?

The issue can result in loss of guest memory integrity through corruption of the Reverse Map Table. The supplied vector indicates no direct impact to confidentiality or availability.

CVE-2026-40669: Medium severity AMD Secure Encrypted Virtualization (SEV) firmware vulnerability

Affected Software

Event History

Frequently Asked Questions

Who is realistically exposed to this issue?

What level of access does an attacker need?

What security property is affected?

Company

Resources

Contact

Frequently Asked Questions

Who is realistically exposed to this issue?

What level of access does an attacker need?

What security property is affected?