{"id":"CVE-2026-0435","kind":"vulnerability","aliases":["CVE-2026-0435"],"related":[],"title":"AMD SEV firmware: use-after-free lets an admin swap a guest device","description":"Operation on a resource after expiration or release in the AMD Secure Encrypted Virtualization (SEV) firmware could allow an attacker with administrative privileges to swap out a guest device without the guest's knowledge, potentially resulting in a loss of confidentiality and integrity.","summary":"AMD Secure Encrypted Virtualization (SEV) firmware performs an operation on a resource after it has been released or expired. An attacker with administrative privileges can swap out a guest device without the guest noticing, which can break confidentiality and integrity.","severity":"medium","cvss":6.0,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["amd","hypervisor","infrastructure","sev","virtualization"],"not_affected_if":["no-amd-sev-guests","non-amd-hardware"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T23:17:19+00:00","first_seen_at":"2026-11-10T23:27:36+00:00","triaged_at":"2026-11-10T23:28:49+00:00","updated_at":"2026-11-10T23:28:49+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-11-10T23:28:49Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"AMD SEV firmware: use-after-free lets an admin swap a guest device","impact":"medium","summary":"AMD Secure Encrypted Virtualization (SEV) firmware performs an operation on a resource after it has been released or expired. An attacker with administrative privileges can swap out a guest device without the guest noticing, which can break confidentiality and integrity.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["amd","sev","hypervisor","virtualization"],"confidence":0.6,"fix_status":"unknown","needs_auth":"yes","worst_case":"admin swaps guest device; confidentiality and integrity lost","analyst_note":"Find AMD's security bulletin for CVE-2026-0435 to get affected firmware versions and the fixed release; the NVD entry alone does not name them.","how_to_check":"unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["no-amd-sev-guests","non-amd-hardware"],"who_is_affected":"Affects hosts running AMD SEV-enabled virtual machines, where the hypervisor and firmware are under the control of the operator. Only an attacker who already has administrative privileges on the host can trigger it, so systems without AMD SEV guests are unlikely to be exposed. Affected firmware versions and the vendor patch are not named in the sources.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"yes","severity_if_unknown":"medium"},"cost_usd":0.000715,"input_tokens":4549,"output_tokens":521,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-0435':17A,20A '-2026':16A,19A 'admin':10A 'administr':48B,87C 'allow':83C 'amd':1A,21B,26B,76C 'attack':46B,85C 'break':62B 'confidenti':63B,106C 'could':82C 'cve':15A,18A 'devic':14A,55B,94C 'encrypt':28B,78C 'expir':44B,71C 'firmwar':3A,31B,81C 'free':7A 'guest':13A,54B,58B,93C,97C 'hypervisor':22B 'infrastructur':23B 'integr':65B,108C 'knowledg':99C 'let':8A 'loss':104C 'notic':59B 'oper':34B,66C 'perform':32B 'potenti':100C 'privileg':49B,88C 'releas':42B,73C 'resourc':37B,69C 'result':101C 'secur':27B,77C 'sev':2A,24B,30B,80C 'swap':11A,51B,90C 'use':5A 'use-after-fre':4A 'virtual':25B,29B,79C 'without':56B,95C","nicknames":[],"mitigations":[],"who_affected":"Affects hosts running AMD SEV-enabled virtual machines, where the hypervisor and firmware are under the control of the operator. Only an attacker who already has administrative privileges on the host can trigger it, so systems without AMD SEV guests are unlikely to be exposed. Affected firmware versions and the vendor patch are not named in the sources.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["amd","hypervisor","infrastructure","medium","sev","virtualization"],"campaign_type":null,"search_a":"'-0435':17A,20A '-2026':16A,19A 'admin':10A 'amd':1A 'cve':15A,18A 'devic':14A 'firmwar':3A 'free':7A 'guest':13A 'let':8A 'sev':2A 'swap':11A 'use':5A 'use-after-fre':4A","search_b":"'administr':48B 'amd':21B,26B 'attack':46B 'break':62B 'confidenti':63B 'devic':55B 'encrypt':28B 'expir':44B 'firmwar':31B 'guest':54B,58B 'hypervisor':22B 'infrastructur':23B 'integr':65B 'notic':59B 'oper':34B 'perform':32B 'privileg':49B 'releas':42B 'resourc':37B 'secur':27B 'sev':24B,30B 'swap':51B 'virtual':25B,29B 'without':56B","search_c":"'administr':87C 'allow':83C 'amd':76C 'attack':85C 'confidenti':106C 'could':82C 'devic':94C 'encrypt':78C 'expir':71C 'firmwar':81C 'guest':93C,97C 'integr':108C 'knowledg':99C 'loss':104C 'oper':66C 'potenti':100C 'privileg':88C 'releas':73C 'resourc':69C 'result':101C 'secur':77C 'sev':80C 'swap':90C 'virtual':79C 'without':95C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T23:17:19+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"psirt@amd.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-0435","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-0435","severity":null,"published_at":"2026-11-10T23:17:19+00:00","modified_at":"2026-11-10T23:17:19+00:00","first_seen_at":"2026-11-10T23:27:36+00:00","fetched_at":"2026-11-10T23:27:36+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}