Trusted Computing Group - vulnerabilities (CVEs)

5 CVEs in 1 products, 0 in the last 30 days, newest from 2026-08-11.

Products

CVE-2026-6726 - CVSS 7.9 (high), 2026-08-11: An information leakage vulnerability was reported in the TCG TPM 2.0 reference code that could allow a local attacker with elevated privileges to obtain a…
CVE-2026-6727 - CVSS 5.9 (medium), 2026-08-11: A timing side-channel vulnerability exists in the RSA OAEP decryption implementation. A privileged local attacker with access to the TPM command interface may…
CVE-2025-2884 - CVSS 6.6 (medium), 2025-06-10: TCG TPM2.0 Reference implementation's CryptHmacSign helper function is vulnerable to Out-of-Bounds read due to the lack of validation the signature scheme…
CVE-2023-1017 - CVSS 7.8 (high), 2023-02-28: An out-of-bounds write vulnerability exists in TPM2.0's Module Library allowing writing of a 2-byte data past the end of TPM2.0 command in the…
CVE-2023-1018 - CVSS 5.5 (medium), 2023-02-28: An out-of-bounds read vulnerability exists in TPM2.0's Module Library allowing a 2-byte read past the end of a TPM2.0 command in the CryptParameterDecryption…