{"id":"CVE-2026-28248","published":"2026-11-10T22:18:32.357","lastModified":"2026-11-10T22:18:32.357","description":"Improper enforcement of behavioral workflow in AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to potentially launch a guest whose attestation report contains an ID key digest for an ID block that doesn't match the guest's measurement resulting in loss of integrity.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-841"],"vendors":[],"products":[],"references":[{"url":"https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-3038.html","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}