Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

TrustedFirmware vulnerabilities

3 published CVEs name TrustedFirmware among the affected products.

Published CVEs
3
Last 12 months
3
Critical
0
Known exploited
0

Critical 0High 1Medium 0Low 2Not scored 0

Newest CVEs

  • CVE-2026-73064

    In Mbed TLS 3.2.0 though 3.6.6 and 4.0.0 through 4.1.0, an attacker who can cause an entropy source to fail can remove or inject bytes into the start of the…

    trustedfirmware · Mbed TLS

    Low2.9
  • CVE-2026-25832

    In Mbed TLS 3.6.x before 3.6.7 and 4.1.x before 4.1.2, the TLS 1.3 client accepts HelloRetryRequest selecting an unadvertised group.

    TrustedFirmware · Mbed TLS

    Low3.7
  • CVE-2026-54467

    On the Trusted Firmware-M (TF-M) 2 through 2.3.0 platform before 00d1b3e, mailbox initialization on PSOC64 and RP2350 accepts a non-secure, unvalidated,…

    TrustedFirmware · Trusted Firmware-M

    High7.0

Products with the most CVEs

  1. Mbed TLS2
  2. Trusted Firmware-M1

Most common weaknesses

  1. CWE-283 1
  2. CWE-394 1
  3. CWE-669 1