CVE-2026-79608CWE-670

CVE-2026-79608

Critical · published October 13, 2026

CVSS v3.1
9.8
EPSS
0%
Percentile
27.3
In the wild
Unconfirmed
What it is

The workaround for XSA-433 (Zenbleed, CVE-2023-20593) was later

re-worked to better integrate with other manipulations of the same MSR.

In this rework an inverted conditional was introduced, resulting in the

workaround to not be applied when needed and vice versa.

For more details, see:

http://xenbits.xen.org/xsa/advisory-433.html

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00349 · 27.3th percentile
Weakness
CWE-670 · Always-Incorrect Control Flow Implementation
Published
2026-10-13T20:17Z
References (2)
EPSS history
Timeline
  • 15 OCT 03:34Z
    EPSS moved — → 0%
    epss
  • 13 OCT 15:44Z
    x86/AMD: ineffectual Zenbleed workaround
    cvelistv5
  • 13 OCT 15:44Z
    x86/AMD: ineffectual Zenbleed workaround
    cvelistv5