{"id":"CVE-2026-0003","kind":"vulnerability","aliases":["CVE-2026-0003"],"related":[],"title":"AMD SEV firmware: static bootloader key lets attackers downgrade and decrypt memory","description":"Use of a per-part static key in the ASP Bootloader could allow an attacker to downgrade the Secure Encrypted Virtualization (SEV) firmware and exploit known vulnerabilities to decrypt memory potentially resulting in loss of confidentiality.","summary":"The AMD ASP Bootloader uses a static key shared across parts, so an attacker can install older, vulnerable Secure Encrypted Virtualization firmware. Once the firmware is downgraded, known flaws can be used to decrypt guest memory.","severity":"medium","cvss":5.9,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["amd","confidential-computing","hypervisor","infrastructure","sev"],"not_affected_if":["no-amd-sev","non-amd-hardware"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T23:17:19+00:00","first_seen_at":"2026-11-10T23:27:36+00:00","triaged_at":"2026-11-10T23:28:50+00:00","updated_at":"2026-11-10T23:28:50+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-11-10T23:28:50Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"AMD SEV firmware: static bootloader key lets attackers downgrade and decrypt memory","impact":"high","summary":"The AMD ASP Bootloader uses a static key shared across parts, so an attacker can install older, vulnerable Secure Encrypted Virtualization firmware. Once the firmware is downgraded, known flaws can be used to decrypt guest memory.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["amd","sev","confidential-computing","hypervisor"],"confidence":0.5,"fix_status":"unknown","needs_auth":"unknown","worst_case":"attacker decrypts guest VM memory after firmware downgrade","analyst_note":"Find the AMD security bulletin and the list of affected firmware and fixed versions for CVE-2026-0003, and confirm the attack prerequisites.","how_to_check":"unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["no-amd-sev","non-amd-hardware"],"who_is_affected":"Systems that run AMD EPYC processors with Secure Encrypted Virtualization for confidential virtual machines are the ones exposed. The sources do not name affected firmware versions or which platforms are covered. Teams that do not use AMD SEV or confidential computing can skip it.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"yes","severity_if_unknown":"unknown"},"cost_usd":0.000708,"input_tokens":4545,"output_tokens":506,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-0003':15A,18A '-2026':14A,17A 'across':35B 'allow':75C 'amd':1A,19B,27B 'asp':28B,72C 'attack':8A,39B,77C 'bootload':5A,29B,73C 'comput':22B 'confidenti':21B,98C 'confidential-comput':20B 'could':74C 'cve':13A,16A 'decrypt':11A,59B,91C 'downgrad':9A,52B,79C 'encrypt':45B,82C 'exploit':87C 'firmwar':3A,47B,50B,85C 'flaw':54B 'guest':60B 'hypervisor':23B 'infrastructur':24B 'instal':41B 'key':6A,33B,69C 'known':53B,88C 'let':7A 'loss':96C 'memori':12A,61B,92C 'older':42B 'part':36B,67C 'per':66C 'per-part':65C 'potenti':93C 'result':94C 'secur':44B,81C 'sev':2A,25B,84C 'share':34B 'static':4A,32B,68C 'use':30B,57B,62C 'virtual':46B,83C 'vulner':43B,89C","nicknames":[],"mitigations":[],"who_affected":"Systems that run AMD EPYC processors with Secure Encrypted Virtualization for confidential virtual machines are the ones exposed. The sources do not name affected firmware versions or which platforms are covered. Teams that do not use AMD SEV or confidential computing can skip it.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["amd","confidentialcomputing","hypervisor","infrastructure","medium","sev"],"campaign_type":null,"search_a":"'-0003':15A,18A '-2026':14A,17A 'amd':1A 'attack':8A 'bootload':5A 'cve':13A,16A 'decrypt':11A 'downgrad':9A 'firmwar':3A 'key':6A 'let':7A 'memori':12A 'sev':2A 'static':4A","search_b":"'across':35B 'amd':19B,27B 'asp':28B 'attack':39B 'bootload':29B 'comput':22B 'confidenti':21B 'confidential-comput':20B 'decrypt':59B 'downgrad':52B 'encrypt':45B 'firmwar':47B,50B 'flaw':54B 'guest':60B 'hypervisor':23B 'infrastructur':24B 'instal':41B 'key':33B 'known':53B 'memori':61B 'older':42B 'part':36B 'secur':44B 'sev':25B 'share':34B 'static':32B 'use':30B,57B 'virtual':46B 'vulner':43B","search_c":"'allow':75C 'asp':72C 'attack':77C 'bootload':73C 'confidenti':98C 'could':74C 'decrypt':91C 'downgrad':79C 'encrypt':82C 'exploit':87C 'firmwar':85C 'key':69C 'known':88C 'loss':96C 'memori':92C 'part':67C 'per':66C 'per-part':65C 'potenti':93C 'result':94C 'secur':81C 'sev':84C 'static':68C 'use':62C 'virtual':83C 'vulner':89C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T23:17:19+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"psirt@amd.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-0003","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-0003","severity":null,"published_at":"2026-11-10T23:17:19+00:00","modified_at":"2026-11-10T23:17:19+00:00","first_seen_at":"2026-11-10T23:27:36+00:00","fetched_at":"2026-11-10T23:27:36+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}