VULNERABILITY INTELLIGENCE
CVE-2025-48514
EPSS probability0.16%
CISA KEVNot currently listed
Published2026-02-10
Last modified2026-06-17
Description
Insufficient Granularity of Access Control in SEV firmware can allow a privileged attacker to create a SEV-ES Guest to attack SNP guest, potentially resulting in a loss of confidentiality.
Weakness classification
- psirt@amd.com: CWE-1220