CVE Watch10 de nov. de 2026

CVE-2026-28247

Improper Access Control Applied to Mirrored or Aliased Memory Regions in AMD Secure Encrypted Virtualization (SEV) firmware could allow a ma

CVSS

—

Sem CVSS

EPSS

—

KEV

—

Exploit Today

—

0-100

Publicado: 10 de nov. de 2026 · Última mod.: 10 de nov. de 2026 · CWE-1257

EPSS · 30d

Ainda não há histórico EPSS suficiente.

Descrição técnica

Improper Access Control Applied to Mirrored or Aliased Memory Regions in AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to change the encryption bit for guest context pages potentially resulting in loss of integrity.

Referências oficiais

www.amd.comhttps://www.amd.com/en/resources/product-security/bulletin/AMD-SB-3038.html

CVEs relacionados

Nenhum CVE relacionado por CWE ou produto.