What’s Vulnerable › Vulnerabilities

CVE-2021-26311: AMD Secure Encrypted Virtualization

• Severity: high (CVSS 7.2 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-05-13 · updated 2026-06-17
• Weakness: CWE-77

Description

In the AMD SEV/SEV-ES feature, memory can be rearranged in the guest address space that is not detected by the attestation mechanism which could be used by a malicious hypervisor to potentially lead to arbitrary code execution within the guest VM if a malicious administrator has access to compromise the server hypervisor.

Affected products

• AMD Epyc 7232P: all versions
• AMD Epyc 7251: all versions
• AMD Epyc 7252: all versions
• AMD Epyc 7261: all versions
• AMD Epyc 7262: all versions
• AMD Epyc 7272: all versions
• AMD Epyc 7281: all versions
• AMD Epyc 7282: all versions
• AMD Epyc 72F3: all versions
• AMD Epyc 7301: all versions
• AMD Epyc 7302: all versions
• AMD Epyc 7302P: all versions
• AMD Epyc 7313: all versions
• AMD Epyc 7313P: all versions
• AMD Epyc 7343: all versions
• AMD Epyc 7351: all versions
• AMD Epyc 7351P: all versions
• AMD Epyc 7352: all versions
• AMD Epyc 7371: all versions
• AMD Epyc 73F3: all versions
• AMD Epyc 7401: all versions
• AMD Epyc 7401P: all versions
• AMD Epyc 7402: all versions
• AMD Epyc 7402P: all versions
• AMD Epyc 7413: all versions
• AMD Epyc 7443: all versions
• AMD Epyc 7443P: all versions
• AMD Epyc 7451: all versions
• AMD Epyc 7452: all versions
• AMD Epyc 7453: all versions

References

• https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1004
• https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1004

Get alerted when CVE-2021-26311 or the next vulnerability affects your stack