CVE-2026-6923
Low · 3.8CVSS
3.8
EPSS
0.2%
Published
May 14, 2026
CISA due date
—
The record
A side-channel attack, which requires a physical presence to the TPM, can lead to extraction of an Elliptic Curve Diffie-Hellman (ECDH) key.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-14074 Side-channel information leakage in WebAuthentication in Google Chrome on iOS prior to… CWE-1300
- CVE-2026-11289 Side-channel information leakage in Paint in Google Chrome prior to 149.0.7827.53 allowed… CWE-1300
- CVE-2026-11284 Side-channel information leakage in PerformanceAPIs in Google Chrome prior to… CWE-1300
- CVE-2026-11153 Side-channel information leakage in Forms in Google Chrome prior to 149.0.7827.53 allowed… CWE-1300
- CVE-2026-8562 Side-channel information leakage in Navigation in Google Chrome prior to 148.0.7778.168… CWE-1300
- CVE-2026-8017 Side-channel information leakage in Media in Google Chrome prior to 148.0.7778.96 allowed… CWE-1300
- CVE-2026-5876 Side-channel information leakage in Navigation in Google Chrome prior to 147.0.7727.55… CWE-1300
- CVE-2026-3929 Side-channel information leakage in ResourceTiming in Google Chrome prior to… CWE-1300