CVE-2026-6923

Published: May 14, 2026Modified: Jun 17, 2026

3.8

Vector

CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N

Exploitability: 0.2 / Impact: 3.6

Source: CNA (Secondary)

Description

A side-channel attack, which requires a physical presence to the TPM, can lead to extraction of an Elliptic Curve Diffie-Hellman (ECDH) key.

Related CWEs

Improper Protection of Physical Side Channels

The device does not contain sufficient protection mechanisms to prevent physical side channels from exposing sensitive information due to patterns in physically observable phenomena such as variations in power consumption, electromagnetic emissions (EME), or acoustic emissions.

References (1)

https://www.gov.il/en/departments/dynamiccollectors/cve_advisories_listing?skip=0

Source: cna@cyber.gov.il

Timeline

No history available yet.