Trusted Computing Group Tpm2.0
5 CVEs affecting Trusted Computing Group Tpm2.0. Latest disclosed: 2026-08-11. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-6726 | High | 7.9 | 2026-08-11 | An information leakage vulnerability was reported in the TCG TPM 2.0 reference code that could allow a local attacker with elevated privileges to obtain a cred… |
CVE-2023-1017 | High | 7.8 | 2023-02-28 | An out-of-bounds write vulnerability exists in TPM2.0's Module Library allowing writing of a 2-byte data past the end of TPM2.0 command in the CryptParameterDe… |
CVE-2025-2884 | Medium | 6.6 | 2025-06-10 | TCG TPM2.0 Reference implementation's CryptHmacSign helper function is vulnerable to Out-of-Bounds read due to the lack of validation the signature scheme with… |
CVE-2026-6727 | Medium | 5.9 | 2026-08-11 | A timing side-channel vulnerability exists in the RSA OAEP decryption implementation. A privileged local attacker with access to the TPM command interface may… |
CVE-2023-1018 | Medium | 5.5 | 2023-02-28 | An out-of-bounds read vulnerability exists in TPM2.0's Module Library allowing a 2-byte read past the end of a TPM2.0 command in the CryptParameterDecryption r… |