https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T11:59:00.490103+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-04481 bdu:2024-04481 2026-10-03T11:59:00.736461+00:00 bdu:2024-04481 https://cve.radiocsirt.org/vuln/bell-cve-2024-29040 BELL-CVE-2024-29040 2026-10-03T11:59:00.736495+00:00

Affected: Alpaquita:23: tpm2-tss, Alpaquita:stream: tpm2-tss

 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0585 certfr-2025-avi-0585 — De multiples vulnérabilités ont été découvertes dans VMware Tanzu. Certaines d'entre elles permettent à un attaquant de… 2026-10-03T11:59:00.736524+00:00 certfr-2025-avi-0585 https://cve.radiocsirt.org/vuln/euvd-2026-259040 EUVD-2026-259040 2026-10-03T11:59:00.736542+00:00 EUVD-2026-259040 https://cve.radiocsirt.org/vuln/fkie_cve-2024-29040 fkie_cve-2024-29040 2026-10-03T11:59:00.736554+00:00

This repository hosts source code implementing the Trusted Computing Group's (TCG) TPM2 Software Stack (TSS). The JSON Quote Info returned by Fapi_Quote has to be deserialized by Fapi_VerifyQuote to the TPM Structure `TPMS_ATTEST`. For the field `TPM2_GENERATED magic` of this structure any number can be used in the JSON structure. The verifier can receive a state which does not represent the actual, possibly malicious state of the device under test. The malicious device might get access to data it shouldn't, or can use services it shouldn't be able to. This issue has been patched in version 4.1.0.

 https://cve.radiocsirt.org/vuln/gsd-2024-29040 gsd-2024-29040 2026-10-03T11:59:00.736582+00:00 gsd-2024-29040 https://cve.radiocsirt.org/vuln/msrc_cve-2024-29040 msrc_CVE-2024-29040 — Fapi Verify Quote: Does not detect if quote was not generated by TPM 2026-10-03T11:59:00.736593+00:00 msrc_CVE-2024-29040 https://cve.radiocsirt.org/vuln/oesa-2024-1613 OESA-2024-1613 — tpm2-tss security update 2026-10-03T11:59:00.736610+00:00

Affected: openEuler:20.03-LTS-SP1: tpm2-tss, openEuler:22.03-LTS: tpm2-tss, openEuler:22.03-LTS-SP2: tpm2-tss, openEuler:22.03-LTS-SP3: tpm2-tss

tpm2-tss is a software stack supporting Trusted Platform Module(TPM) 2.0 system APIs which provides TPM2.0 specified APIs for applications to access TPM module through kernel TPM drivers. Security Fix(es): A flaw was found in the tpm2-tss package, where it was not checked to see if the magic number in the attest is equal to the TPM2_GENERATED_VALUE. This flaw allows an attacker to generate arbitrary quote data, which may not be detected by Fapi_VerifyQuote.(CVE-2024-29040)

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:13933-1 openSUSE-SU-2024:13933-1 — libtss2-esys0-32bit-4.1.0-1.1 on GA media 2026-10-03T11:59:00.736638+00:00

libtss2-esys0-32bit-4.1.0-1.1 on GA media

 https://cve.radiocsirt.org/vuln/suse-su-2024:1635-1 SUSE-SU-2024:1635-1 — Security update for tpm2-0-tss 2026-10-03T11:59:00.736656+00:00

Security update for tpm2-0-tss

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-29040 UBUNTU-CVE-2024-29040 2026-10-03T11:59:00.736671+00:00

Affected: Ubuntu:22.04:LTS: tpm2-tss, Ubuntu:24.04:LTS: tpm2-tss

This repository hosts source code implementing the Trusted Computing Group's (TCG) TPM2 Software Stack (TSS). The JSON Quote Info returned by Fapi_Quote has to be deserialized by Fapi_VerifyQuote to the TPM Structure `TPMS_ATTEST`. For the field `TPM2_GENERATED magic` of this structure any number can be used in the JSON structure. The verifier can receive a state which does not represent the actual, possibly malicious state of the device under test. The malicious device might get access to data it shouldn't, or can use services it shouldn't be able to. This issue has been patched in version 4.1.0.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0778 WID-SEC-W-2026-0778 — Dell Secure Connect Gateway Policy Manager: Mehrere Schwachstellen 2026-10-03T11:59:00.736706+00:00

Ein Angreifer kann mehrere Schwachstellen in Dell Secure Connect Gateway Policy Manager ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.