Skip to content
Threat Feed
Subscribe

Tag

Confidential-Computing

4 briefs RSS
high advisory

CVE-2026-100839: AML Injection Vulnerability in Contrast Runtime

Contrast versions before 1.18.0 are vulnerable to an AML injection attack (BadAML), allowing a malicious host to execute arbitrary code within the guest kernel on AMD SEV-SNP confidential computing platforms.

Metal-QEMU-SNP +1 confidential-computing kernel vulnerability virtualization
1t 1c
high advisory

CVE-2026-100833: Insecure Image Digest Verification in Edgeless Systems Contrast

Edgeless Systems Contrast versions 1.14.0 to 1.23.1 contain an insecure runtime policy configuration that allows attackers with Kata agent API access to substitute container images by bypassing digest verification.

Contrast +1 vulnerability cloud-security confidential-computing credential-access kubernetes cloud
2t 1c updated
high advisory

Improper Seed Verification in Contrast Kubernetes Confidential-Computing Runtime

A vulnerability in the Contrast confidential-computing runtime allows attackers to impersonate a legitimate Coordinator by supplying a malicious seed during recovery, leading to the potential recovery of workload secrets.

PoC Contrast +1 kubernetes confidential-computing cve vulnerability attestation aTLS CVE-2026-100835
1t 2c updated
high advisory

BadAML Injection Allows Arbitrary Code Execution in Confidential VMs

The BadAML injection attack allows arbitrary code execution in confidential VMs by exploiting the ACPI interface, enabling attackers with host control to execute malicious AML code within the guest.

badaml acpi injection confidential-computing
2r 1t