Vulnerabilities > CVE-2021-26327 - Exposure of Resource to Wrong Sphere vulnerability in AMD products

047910
CVSS 5.5 - MEDIUM
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
HIGH
Integrity impact
NONE
Availability impact
NONE
local
low complexity
amd
CWE-668

Summary

Insufficient validation of guest context in the SNP Firmware could lead to a potential loss of guest confidentiality.

Common Weakness Enumeration (CWE)