{"id":"CVE-2026-105051","aliases":["EUVD-2026-91848","GHSA-pcmv-37x3-p3jg"],"status":"published","title":"Denuvo Anti-Tamper through 2026-03-04 allows bypass of a hypervisor presence check via CPUID...","description":"Denuvo Anti-Tamper through 2026-03-04 allows bypass of a hypervisor presence check via CPUID interception (SimpleSvm.sys on AMD; hyperkd.sys and hyperhv.dll on Intel).","severity":{"version":"3.1","score":1.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N","level":"low","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.00077,"percentile":0.00106,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-348"],"published":"2026-10-02T22:59:56Z","modified":"2026-10-06T16:08:27Z","products":[{"vendor":"irdeto","product":"denuvo anti-tamper"}],"references":[{"url":"https://habr.com/en/articles/1021894/"},{"url":"https://github.com/RD945/hypervisor-crack-audit"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105051"},{"url":"https://habr.com/en/articles/1021894"},{"url":"https://github.com/advisories/GHSA-pcmv-37x3-p3jg"}],"sources":{"cve":[{"id":"CVE-2026-105051","description":"Denuvo Anti-Tamper through 2026-03-04 allows bypass of a hypervisor presence check via CPUID interception (SimpleSvm.sys on AMD; hyperkd.sys and hyperhv.dll on Intel).","status":"published","published":"2026-10-02T22:59:56.65Z","modified":"2026-10-05T16:12:01.83Z","cvss":[{"version":"3.1","score":1.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N","level":"low","assessor":"cna"}],"cwes":["CWE-348"],"updated_at":"2026-11-02T14:19:57.100857Z"}],"euvd":[{"id":"EUVD-2026-91848","description":"Denuvo Anti-Tamper through 2026-03-04 allows bypass of a hypervisor presence check via CPUID interception (SimpleSvm.sys on AMD; hyperkd.sys and hyperhv.dll on Intel).","status":"published","published":"2026-10-02T22:59:56Z","modified":"2026-10-05T16:12:01Z","cvss":[{"version":"3.1","score":1.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T17:27:39.819382Z"}],"ghsa":[{"id":"GHSA-pcmv-37x3-p3jg","title":"Denuvo Anti-Tamper through 2026-03-04 allows bypass of a hypervisor presence check via CPUID...","description":"Denuvo Anti-Tamper through 2026-03-04 allows bypass of a hypervisor presence check via CPUID interception (SimpleSvm.sys on AMD; hyperkd.sys and hyperhv.dll on Intel).","status":"published","published":"2026-10-03T00:31:13Z","modified":"2026-10-03T00:31:22Z","cvss":[{"version":"3.1","score":1.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N","level":"low"}],"cwes":["CWE-348"],"updated_at":"2026-11-02T15:12:44.258575Z"}],"nvd":[{"id":"CVE-2026-105051","description":"Denuvo Anti-Tamper through 2026-03-04 allows bypass of a hypervisor presence check via CPUID interception (SimpleSvm.sys on AMD; hyperkd.sys and hyperhv.dll on Intel).","status":"published","published":"2026-10-02T23:16:58.247Z","modified":"2026-10-06T16:08:27.613Z","cvss":[{"version":"3.1","score":1.9,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N","level":"low","assessor":"secondary"}],"cwes":["CWE-348"],"updated_at":"2026-11-02T14:12:53.75133Z"}]}}