Skip to content
AMD Reports Vulnerabilities in SEV-SNP Technology

AMD Reports Vulnerabilities in SEV-SNP Technology

First seen 13 Nov 2026, 17:42 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 13, 2026 at 17:43 UTC
  • •Two vulnerabilities reported in AMD SEV-SNP technology.
  • •AMD SB 3061 allows privileged access to guest register data.
  • •AMD SB 3059 enables manipulation of MMIO routing by malicious hypervisors.

AMD has disclosed two vulnerabilities affecting its Secure Encrypted Virtualization - Secure Nested Paging (SEV-SNP) technology. The first, identified in AMD SB 3061, involves incomplete cleanup during VMRUN error handling, potentially allowing privileged attackers to access guest register data via Transient Scheduler Attacks (TSA), with a CVSS score of 4.9. The second vulnerability, AMD SB 3059, concerns insufficient access control granularity in SEV firmware, enabling malicious hypervisors to manipulate Memory Mapped I/O (MMIO) routing, risking guest memory integrity, rated at CVSS 5.9. Both vulnerabilities impact AMD EPYC™ Series Processors, with mitigations planned for release in November and December 2026. Users are advised to consult their OEMs for BIOS updates specific to their products.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 6h ago How this analysis works

Timeline

2026-11-13
AMD discloses vulnerabilities
AMD announced two vulnerabilities affecting SEV-SNP technology, with mitigations planned for affected processors.
AMD
2026-11-13
Mitigation release planned
AMD plans to release firmware updates for EPYC processors to address the vulnerabilities in November and December 2026.
AMD

More articles in this cluster (2)

Following this threat?

Track CVE-2026-0462 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (17)

1 / 3

Common questions

What are the CVSS scores for the vulnerabilities?
AMD SB 3061 has a CVSS score of 4.9, while AMD SB 3059 has a score of 5.9.
When will mitigations be available?
Mitigations for the vulnerabilities are planned for release in November and December 2026.
Which AMD products are affected?
The vulnerabilities affect AMD EPYC™ Series Processors, including the 7003, 8004, and 8005 series.