Skip to content
fr Sign in
7.9 High

CVE-2026-6726 An information leakage vulnerability was reported in the TCG TPM 2.0 reference code that could allow a local attacker…

Description

An information leakage vulnerability was reported in the TCG TPM 2.0 reference code that could allow a local attacker with elevated privileges to obtain a credential from a TPM-aware CA for a falsified TPM key (such as an Attestation Key, DevID Key or TLS authentication key) and falsify other TPM 2.0 attestations with this key. See also TCG VRT0010.

Affected products and versions

Product Affected versions Fixed in
TPM2.0 184 earliest → 184 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of TPM2.0

The 5 CVEs of TPM2.0 →
CVE-2026-6727 A timing side-channel vulnerability exists in the RSA OAEP decryption implementation 5.9 Medium CVE-2025-2884 TCG TPM2.0 Reference implementation's CryptHmacSign helper function is vulnerable to Out-of-Bounds read due to the… Not rated CVE-2023-1017 An out-of-bounds write vulnerability exists in TPM2.0's Module Library allowing writing of a 2-byte data past the end of… Not rated CVE-2023-1018 An out-of-bounds read vulnerability exists in TPM2.0's Module Library allowing a 2-byte read past the end of a TPM2.0… 5.5 Medium
Track this CVE