Denuvo Anti-Tamper Vulnerability in Hypervisor Presence Check
CVE-2026-105051

1.9LOW

Key Information:

Vendor

Irdeto

Status
Denuvo Anti-tamper
Vendor
CVE Published:
2 October 2026

What is CVE-2026-105051?

The Denuvo Anti-Tamper feature allows for a bypass of the hypervisor presence check, potentially enabling unauthorized access to the protected software environment. This vulnerability is exploited through CPUID interception techniques, specifically targeting both AMD and Intel systems via SimpleSvm.sys and hyperkd.sys/hyperhv.dll respectively. Such an exploit can compromise the integrity of applications leveraging Denuvo's protective measures, raising significant concerns for users and developers relying on Denuvo for software security.

Affected Version(s)

Denuvo Anti-Tamper Windows 0 <= 2026-03-04

References

https://habr.com/en/articles/1021894/
https://github.com/RD945/hypervisor-crack-audit

CVSS V3.1

Score:
1.9
Severity:
LOW
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.