CVE-2026-28247
Published Nov 10, 2026
CWE-1257
Description
Improper Access Control Applied to Mirrored or Aliased Memory Regions in AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to change the encryption bit for guest context pages potentially resulting in loss of integrity.
Is your site exposed to CVE-2026-28247?
Run a free security scan — no signup, results in seconds.
Weakness Type (CWE)
CWE-1257
CWE-1257
References
Frequently Asked Questions
What is CVE-2026-28247? +
Improper Access Control Applied to Mirrored or Aliased Memory Regions in AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to change the encryption bit for guest context pages potentially resulting in loss of integrity.
How do I check if I'm vulnerable to CVE-2026-28247? +
You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.
Related Vulnerabilities
CVE-2025-36600
8.2
Dell Client Platform BIOS contains an Improper Access Control Applied to Mirrored or Aliased Memory Regions vulnerability in an externally …
CVE-2025-27032
7.8
memory corruption while loading a PIL authenticated VM, when authenticated VM image is loaded without maintaining cache coherency.
