Missing Ability to Patch ROM Code

Missing an ability to patch ROM code may leave a System or System-on-Chip (SoC) in a vulnerable state.

CVEs (2)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2026-59847 - - Jul 21, 2026 Jul 21, 2026 N/A· v4 5.9 MEDIUM· v3 N/A· v2 A flaw was found in libssh. Incorrect AES-GCM finalization checks in builds using the OpenSSL backend can effectively remove integrity protection, allowing an in-path attacker to modify plaintext on the wire without dete...Show more A flaw was found in libssh. Incorrect AES-GCM finalization checks in builds using the OpenSSL backend can effectively remove integrity protection, allowing an in-path attacker to modify plaintext on the wire without detection.Show less
CVE-2025-55338 1Microsoft 14Windows 10 1507 Windows 10 1607Windows 10 1809+11 more Jun 17, 2026 Oct 14, 2025 N/A· v4 4.6 MEDIUM· v3 N/A· v2 Missing Ability to Patch ROM Code in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2026-59847

Jul 21, 2026

N/A· v4

5.9 MEDIUM· v3

N/A· v2

A flaw was found in libssh. Incorrect AES-GCM finalization checks in builds using the OpenSSL backend can effectively remove integrity protection, allowing an in-path attacker to modify plaintext on the wire without dete...Show more

CVE-2025-55338

1Microsoft

14Windows 10 1507

Windows 10 1607Windows 10 1809+11 more

Jun 17, 2026

Oct 14, 2025

N/A· v4

4.6 MEDIUM· v3

N/A· v2

Missing Ability to Patch ROM Code in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.