CVE-2026-0003
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
Use of a per-part static key in the ASP Bootloader could allow an attacker to downgrade the Secure Encrypted Virtualization (SEV) firmware and exploit known vulnerabilities to decrypt memory potentially resulting in loss of confidentiality.
| CWE | CWE-321 |
| Vendor | amd |
| Product | amd epyc™ 9004 series processors |
| Published | Nov 10, 2026 |
Stay Ahead of the Next One
Get instant alerts for amd amd epyc™ 9004 series processors
Be the first to know when new unknown vulnerabilities affecting amd amd epyc™ 9004 series processors are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
AMD / AMD EPYC™ 9004 Series Processors
All versions affected AMD / AMD EPYC™ 7003 Series Processors
All versions affected AMD / AMD EPYC™ 8004 Series Processors
All versions affected AMD / AMD EPYC™ Embedded 7003 Series Processors
All versions affected AMD / AMD EPYC™ Embedded 9004 Series Processors (formerly codenamed "Genoa")
All versions affected AMD / AMD EPYC™ Embedded 9004 Series Processors (formerly codenamed "Bergamo")
All versions affected AMD / AMD EPYC™ Embedded 8004 Series Processors
All versions affected