FreeRTOS vulnerabilities

CVEs per yearBy the year they were published

1. 20242
2. 202610

Newest CVEs

• CVE-2026-119086

  Missing type validation in xQueueSelectFromSet in FreeRTOS-Kernel

  FreeRTOS · FreeRTOS-Kernel

  High8.2
• CVE-2026-102552

  Improper verification of the source of a communication channel in FreeRTOS-Plus-TCP DNS resolver

  FreeRTOS · FreeRTOS-Plus-TCP

  High8.2
• CVE-2026-102551

  Improper verification of the source of a communication channel in FreeRTOS-Plus-TCP Router Advertisement handling

  FreeRTOS · FreeRTOS-Plus-TCP

  Critical9.2
• CVE-2026-109588

  Numeric truncation in the MPU buffer authorization check in FreeRTOS-Kernel

  FreeRTOS · FreeRTOS-Kernel

  Critical9.3
• CVE-2026-109587

  Incorrect authorization in the Arm Cortex-R82 MPU port in FreeRTOS-Kernel

  FreeRTOS · FreeRTOS-Kernel

  Critical9.3
• CVE-2026-77237

  Missing type validation in xQueueAddToSet in FreeRTOS-Kernel

  FreeRTOS · FreeRTOS-Kernel

  High8.2
• CVE-2026-77236

  Missing size validation in SecureContext_AllocateContext in FreeRTOS-Kernel

  FreeRTOS · FreeRTOS-Kernel

  High8.3
• CVE-2026-77235

  Missing privilege check in SecureContext_FreeContext in FreeRTOS-Kernel

  FreeRTOS · FreeRTOS-Kernel

  High8.3
• CVE-2026-77234

  Improper input validation in FreeRTOS-Kernel timer command handling

  FreeRTOS · FreeRTOS-Kernel

  Critical9.3
• CVE-2026-8686

  DoS from MQTT v5.0 Deserialization Fault in core MQTT

  FreeRTOS · coreMQTT

  High8.7