Cybersecurity Researchers Uncover Critical Vulnerabilities in AMD SEV-SNP Confidential Computing

Cybersecurity researchers from ETH Zurich and Google have disclosed two critical vulnerabilities, Mior (CVE-2026-0462) and Skyfall (CVE-2026-40671), in AMD's Secure Encrypted Virtualization-Secure Nested Paging (SEV-SNP) technology. These flaws could allow a compromised host hypervisor to breach confidential virtual machines, exfiltrate cryptographic keys, and tamper with memory. AMD has confirmed that the vulnerabilities affect multiple EPYC processor lines and Instinct MI300A accelerators, with patches scheduled.