CVE-2026-77235
⚠️ highSummary
Missing privilege verification in the secure context cleanup handler in FreeRTOS-Kernel before 11.3.1 might allow local users to cause a use-after-free condition in secure-world memory via the SVC handler for secure context deallocation. To remediate this issue, users should upgrade to version 11.3.1 or later.
CVSS Score
7.3
High
EPSS Score
0.1
Exploit Probability
Published Date
2026-08-21
First Seen: 2026-08-22
📊 Relative Risk Intelligence
This CVE is Moderate Risk - more severe than 54.5% of all 349,016 vulnerabilities in our database.
#158,897
Above average severity
Severity Percentile
Last Modified
2026-08-24
Source
NVD 🔗
CVSS Vector 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:H
CVSS Vector 4.0
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CWE IDs (Weakness Types)
