Veille CVE

Recherche « trustedfirmware Mbed TLS »

2 CVE

Critique 0 Élevée 0 Moyenne 0 Faible 2 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « trustedfirmware Mbed TLS » ✕
  1. CVE-2026-73064 2.9 Faible

    trustedfirmware Mbed TLS

    In Mbed TLS 3.2.0 though 3.6.6 and 4.0.0 through 4.1.0, an attacker who can cause an entropy source to fail can remove or inject bytes into the start of the TLS stream. This only affects TLS 1.3 servers.

  2. CVE-2026-25832 3.7 Faible

    TrustedFirmware Mbed TLS

    In Mbed TLS 3.6.x before 3.6.7 and 4.1.x before 4.1.2, the TLS 1.3 client accepts HelloRetryRequest selecting an unadvertised group.