Disclosure summary
The vulnerability assigned to this CVE could lead to corruption of guest encrypted memory. The mitigation for this vulnerability requires a Windows update. This CVE is being documented in the Security Update Guide to announce that the latest builds of Windows enable the mitigation and provide protection against the vulnerability. Please see the following for more information: [https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3016.html]
Source-specific records & product guidance
Sources retain their own attribution and scoring. Follow the original record to confirm affected versions, fixed releases, and configuration conditions.
Microsoft Security Updates (CVRF) · 2026-Apr
Open original source · Updated Apr 14, 2026
AMD: CVE-2023-20585 IOMMU Write Buffer Vulnerability
Maximum of vendor-reported product scores; products and fixed builds are associations, not a universal affected-version statement.
Microsoft maximum product score: 5.3
| Vendor | Product / association | Version / bounds |
|---|---|---|
| Microsoft update guide | Windows Server 2025 (Server Core installation) | (MSRC status code 3) |
| Microsoft update guide | Windows 11 Version 25H2 for x64-based Systems | (MSRC status code 3) |
| Microsoft update guide | Windows 11 Version 24H2 for x64-based Systems | (MSRC status code 3) |
| Microsoft update guide | Windows Server 2025 | (MSRC status code 3) |
Vendor remediation references
- 5082063 · build 10.0.26100.32690 · product IDs 12437, 12436
- Vendor guidance · product IDs 12437, 12436
- 5082063 · product IDs 12437, 12436
- 5083769 · build 10.0.26200.8246 · product IDs 20438
- Vendor guidance · product IDs 20438
- 5083769 · product IDs 20438, 12390
- 5083769 · build 10.0.26100.8246 · product IDs 12390
- Vendor guidance · product IDs 12390
Original records & references
- NIST NVD record
- CVE Program record
- msrc.microsoft.com — Vendor advisory
PUBLISHED 2026-04-14T03:00:00-04:00
MODIFIED 2026-04-14T03:00:00-04:00
INGESTED 2026-10-08T12:45:03-04:00