Vulnerability in Trusted Computing Group Tpm2.0
CVE-2026-6727
A timing side-channel vulnerability exists in the RSA OAEP decryption implementation. A privileged local attacker with access to the TPM command interface may be able to exploit timing differences to recover information that could allow de…
CVSS v3 metric
CVSS v3 base score 5.9 (Medium). Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N.
Affected products
- Trusted Computing Group Tpm2.0 — versions 0
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2026-6727?
- CVE-2026-6727 is a medium-severity vulnerability in Trusted Computing Group Tpm2.0, classified under CWE-208. CVSS score: 5.9/10. Published 2026-08-11.
- How severe is CVE-2026-6727?
- Medium severity. CVSS v3 base score is 5.9 out of 10.