CVE-2026-6923

Summary

A side-channel attack, which requires a physical presence to the TPM, can lead to extraction of an Elliptic Curve Diffie-Hellman (ECDH) key.

Affected Software

Weaknesses

• CWE-1300: CWE-1300 Improper protection of physical side channels

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://www.gov.il/en/departments/dynamiccollectors/cve_advisories_listing?skip=0

• ←Previous
• Next→