https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-21T20:23:20.045622+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-31139 EUVD-2026-31139 2026-10-21T20:23:20.050610+00:00 EUVD-2026-31139 https://cve.radiocsirt.org/vuln/fkie_cve-2021-40327 fkie_cve-2021-40327 2026-10-21T20:23:20.050663+00:00

Trusted Firmware-M (TF-M) 1.4.0, when Profile Small is used, has incorrect access control. NSPE can access a secure key (held by the Crypto service) based solely on knowledge of its key ID. For example, there is no authorization check associated with the relationship between a caller and a key owner.

 https://cve.radiocsirt.org/vuln/ghsa-p88f-g9m7-hv9c GHSA-p88f-g9m7-hv9c 2026-10-21T20:23:20.050715+00:00

Trusted Firmware-M (TF-M) 1.4.0, when Profile Small is used, has incorrect access control. NSPE can access a secure key (held by the Crypto service) based solely on knowledge of its key ID. For example, there is no authorization check associated with the relationship between a caller and a key owner.

 https://cve.radiocsirt.org/vuln/gsd-2021-40327 gsd-2021-40327 2026-10-21T20:23:20.050745+00:00 gsd-2021-40327 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-40327 Withdrawn: UBUNTU-CVE-2021-40327 2026-10-21T20:23:20.050765+00:00

Withdrawn by the publisher.

Affected: Ubuntu:20.04:LTS: arm-trusted-firmware, Ubuntu:22.04:LTS: arm-trusted-firmware, Ubuntu:24.04:LTS: arm-trusted-firmware, Ubuntu:25.10: arm-trusted-firmware

Trusted Firmware-M (TF-M) 1.4.0, when Profile Small is used, has incorrect access control. NSPE can access a secure key (held by the Crypto service) based solely on knowledge of its key ID. For example, there is no authorization check associated with the relationship between a caller and a key owner.