CVE-2026-20962

Medium · 4.4

CVSS

4.4

EPSS

0.4%

Published

Jan 13, 2026

CISA due date

—

The record

Use of uninitialized resource in Dynamic Root of Trust for Measurement (DRTM) allows an authorized attacker to disclose information locally.

Ecosystem	Package	Introduced	Fixed