Lucene search
K

298 matches found

Vulnrichment
Vulnrichment
added 2026/02/10 7:11 p.m.5 views

CVE-2025-29939

Improper access control in secure encrypted virtualization SEV could allow a privileged attacker to write to the reverse map page RMP during secure nested paging SNP initialization, potentially resulting in a loss of guest memory confidentiality and integrity...

6.9CVSS5.5AI score0.00018EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/02/10 7:9 p.m.22 views

CVE-2025-29952

Improper Initialization within the AMD Secure Encrypted Virtualization SEV firmware can allow an admin privileged attacker to corrupt RMP covered memory, potentially resulting in loss of guest memory integrity...

5.9CVSS0.0002EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/02/10 7:9 p.m.4 views

CVE-2025-29952

Improper Initialization within the AMD Secure Encrypted Virtualization SEV firmware can allow an admin privileged attacker to corrupt RMP covered memory, potentially resulting in loss of guest memory integrity...

5.9CVSS5.5AI score0.0002EPSS
Exploits0References2
CVE
CVE
added 2026/02/10 7:9 p.m.7 views

CVE-2025-29952

CVE-2025-29952 involves improper initialization in AMD Secure Encrypted Virtualization (SEV) firmware that can allow an admin-privileged attacker to corrupt RMP-protected memory, potentially causing loss of guest memory integrity. Affected component: SEV firmware; root cause: improper initializat...

5.9CVSS5.5AI score0.0002EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/02/10 7:9 p.m.5 views

CVE-2025-52536

Improper Prevention of Lock Bit Modification in SEV firmware could allow a privileged attacker to downgrade firmware potentially resulting in a loss of integrity...

6.7CVSS5.5AI score0.00018EPSS
Exploits0References1
Debian CVE
Debian CVE
added 2026/02/10 7:8 p.m.3 views

CVE-2025-48517

Insufficient Granularity of Access Control in SEV firmware could allow a privileged user with a malicious hypervisor to create a SEV-ES guest with an ASID in the range meant for SEV-SNP guests potentially resulting in a partial loss of confidentiality...

4.6CVSS5.2AI score0.00018EPSS
Exploits0
CVE
CVE
added 2026/02/10 7:7 p.m.8 views

CVE-2025-29948

CVE-2025-29948 affects AMD Secure Encrypted Virtualization (SEV) firmware. The issue is improper access control that could allow a malicious hypervisor to bypass RMP protections, potentially compromising SEV-SNP guest memory integrity. Affected software is SEV firmware; the root cause is access-c...

5.9CVSS5.5AI score0.00018EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/02/10 7:7 p.m.3 views

CVE-2025-29948

Improper access control in AMD Secure Encrypted Virtualization SEV firmware could allow a malicious hypervisor to bypass RMP protections, potentially resulting in a loss of SEV-SNP guest memory integrity...

5.9CVSS5.5AI score0.00018EPSS
Exploits0References1
Fedora
Fedora
added 2026/02/10 1:34 a.m.5 views

[SECURITY] Fedora 43 Update: rust-snpguest-0.9.2-4.fc43

Navigation utility for AMD SEV-SNP guest environment...

7.5CVSS5.4AI score0.00042EPSS
Exploits1
Fedora
Fedora
added 2026/02/10 1:34 a.m.6 views

[SECURITY] Fedora 43 Update: rust-sevctl-0.6.2-6.fc43

Administrative utility for AMD SEV...

7.5CVSS5.4AI score0.00042EPSS
Exploits1
Positive Technologies
Positive Technologies
added 2026/02/10 12:0 a.m.2 views

PT-2026-7450

Name of the Vulnerable Software and Affected Versions AMD Secure Encrypted Virtualization SEV firmware affected versions not specified Description An improper initialization within the AMD Secure Encrypted Virtualization SEV firmware can allow an attacker with administrator privileges to corrupt...

5.9CVSS5.4AI score0.0002EPSS
Exploits0References3
CNNVD
CNNVD
added 2026/02/10 12:0 a.m.3 views

AMD EPYC Processor 安全漏洞

The AMD EPYC Processor is a series of multi-core processors developed by American semiconductor company AMD. There is a security vulnerability in the AMD EPYC Processor, which stems from improper access control. This vulnerability may lead to a loss of integrity in SEV-SNP guest memory...

5.9CVSS5.8AI score0.00018EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/02/10 12:0 a.m.5 views

PT-2026-7446

Improper access control in secure encrypted virtualization SEV could allow a privileged attacker to write to the reverse map page RMP during secure nested paging SNP initialization, potentially resulting in a loss of guest memory confidentiality and integrity...

6.9CVSS5.5AI score0.00018EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/02/10 12:0 a.m.6 views

PT-2026-7445

A use after free in the SEV firmware could allow a malicous hypervisor to activate a migrated guest with the SINGLE SOCKET policy on a different socket than the migration agent potentially resulting in loss of integrity...

4.6CVSS5.5AI score0.0002EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2026/02/10 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2025-48514

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient Granularity of Access Control in SEV firmware can allow a privileged attacker to create a SEV-ES Guest to attack SNP guest, potentially resulting i...

4CVSS5.5AI score0.00018EPSS
Exploits0References3
CNNVD
CNNVD
added 2026/02/10 12:0 a.m.2 views

AMD EPYC 9005 Series 安全漏洞

The AMD EPYC 9005 Series is a series of processors developed by Advanced Microelectronics Devices, Inc. AMD. There are security vulnerabilities in the AMD EPYC 9005 Series. These vulnerabilities stem from improper handling of error conditions during host failures, which may allow privileged local...

1.8CVSS5.8AI score0.0002EPSS
Exploits0References1
Amd
Amd
added 2026/02/10 12:0 a.m.6 views

AMD EPYC™ and AMD EPYC™ Embedded Series Processor Vulnerabilities – February 2026

CVE Details Refer to Glossary for explanation of terms CVE| CVE Description| CVSS Score| CVSS Vector ---|---|---|--- CVE-2025-52533| Improper access control in an on-chip debug interface could allow a privileged attacker to enable a debug interface and potentially compromise data confidentiality ...

8.7CVSS6.4AI score0.00126EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2026/02/10 12:0 a.m.3 views

PT-2026-7448

Name of the Vulnerable Software and Affected Versions AMD Secure Encrypted Virtualization SEV firmware affected versions not specified Description An access control issue in AMD Secure Encrypted Virtualization SEV firmware may allow a malicious hypervisor to circumvent RMP protections. This could...

5.9CVSS5.4AI score0.00018EPSS
Exploits0References3
Packet Storm News
Packet Storm News
added 2026/01/19 12:0 a.m.6 views

StackWarp: Breaking AMD SEV-SNP Integrity via Deterministic Stack-Pointer Manipulation through the CPU's Stack Engine

In this paper, the authors present StackWarp, a software-based architectural attack exploiting the stack engine on AMD Zen CPUs to modify the stack pointer within an SEV-SNP guest, fully breaking integrity...

5.4AI score
Exploits0
OSV
OSV
added 2026/01/16 4:15 p.m.2 views

DEBIAN-CVE-2025-29943

Write what were condition within AMD CPUs may allow an admin-privileged attacker to modify the configuration of the CPU pipeline potentially resulting in the corruption of the stack pointer inside an SEV-SNP guest...

4.6CVSS5.8AI score0.00008EPSS
Exploits1References1
Rows per page
Query Builder