Trusted Computing Group vulnerabilities
We track 2 vulnerabilities in Trusted Computing Group products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on August 11, 2026.
2vulnerabilities
0critical
2high
0exploited
7.8average CVSS score
Latest Trusted Computing Group vulnerabilities
- 7.9 High severity
TPM2.0: Incorrect Type Conversion or Cast
An information leakage vulnerability was reported in the TCG TPM 2.0 reference code that could allow a local attacker with elevated privileges to obtain a credential from a TPM-aware CA for a falsified TPM key (such as an Attestation Key, DevID Key or TLS auth
- 7.8 High severity
TPM2.0: Out-of-bounds Write
An out-of-bounds write vulnerability exists in TPM2.0's Module Library allowing writing of a 2-byte data past the end of TPM2.0 command in the CryptParameterDecryption routine. An attacker who can successfully exploit this vulnerability can lead to denial of s