Vulnerability record/PUBLISHED/Published Nov 10, 2026 22:10:18 UTC
CVE-2026-40670
Improper check for unusual or exceptional conditions in AMD Secure Encrypted Virtualization - Secure Nested Paging (SEV-SNP) could allow a privileged attacker to potentially overlap MMIO regions with DRAM regions resulting in loss of integrity.
Base score5.9/ 10
SeverityMediumCVSS 4.0
Exploitability / impact
CVSS metric breakdown
Base severityMedium
Attack vectorLocalAV
Attack complexityLowAC
Attack requirementsNoneAT
Privileges requiredHighPR
User interactionNoneUI
Vulnerable system confidentialityNoneVC
Vulnerable system integrityNoneVI
Vulnerable system availabilityNoneVA
Subsequent system confidentialityNoneSC
Subsequent system integrityHighSI
Subsequent system availabilityNoneSA
CVSS vector string
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:N/SI:H/SA:NCVSS communicates standardized severity and impact characteristics. It does not establish whether a system is exploitable in your specific environment.
Record context
CVE Numbering AuthorityAMD
Last updatedNov 12, 2026 23:47:03 UTC
PublishedNov 10, 2026 22:10:18 UTC
ReservedApr 14, 2026 17:04:40 UTC