CVE-2026-0003

MediumCVSS 5.9/10Last modified Nov 13, 2026

Description

Use of a per-part static key in the ASP Bootloader could allow an attacker to downgrade the Secure Encrypted Virtualization (SEV) firmware and exploit known vulnerabilities to decrypt memory potentially resulting in loss of confidentiality.

Metrics

CVSS 4.0 5.9/10CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weakness enumeration

CWE-321

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
Nov 10, 2026
Last modified
Nov 13, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-00045.7A transient execution vulnerability in some AMD processors may allow an attacker with the ability to execute code on the system to infer datCVE-2026-00056.2In onServiceDisconnected of KeyguardServiceDelegate.java, there is a possible partial bypass of app pinning allowing limited interaction witCVE-2026-00069.8In multiple locations, there is a possible out of bounds read and write due to a heap buffer overflow. This could lead to remote code executCVE-2026-00078.6In writeToParcel of WindowInfo.cpp, there is a possible way to trick a user into accepting a permission due to a tapjacking/overlay attack. CVE-2026-00088.4In multiple functions of FaceEnroll.kt, there is a possible privilege escalation due to a confused deputy. This could lead to local escalatiCVE-2026-00097.8In multiple locations, there is a possible tapjacking due to a logic error in the code. This could lead to local escalation of privilege witCVE-2026-00108.4In onTransact of IDrmManagerService.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escCVE-2026-00118.4In enableSystemPackageLPw of Settings.java, there is a possible way to prevent location access from working due to a logic error in the codeCVE-2026-00126.2In setHideSensitive of ExpandableNotificationRow.java, there is a possible contact name leak due due to a logic error in the code. This coulCVE-2026-00138.4In setupLayout of PickActivity.java, there is a possible way to start any activity as a DocumentsUI app due to a confused deputy. This couldCVE-2026-00146.2In isPackageNullOrSystem of AppOpsService.java, there is a possible persistent denial of service due to improper input validation. This coulCVE-2026-00156.2In multiple locations of AppOpsService.java, there is a possible persistent denial of service due to improper input validation. This could l
CVE-2026-0003: Medium severity, CVSS 5.9 | Vulnix