FR
Vendor
FreeRTOS
9
CVEs
0
On KEV
4
New 30D
Products
FR8.8
FreeRTOS-Kernel
FreeRTOS
6 CVEs0 on KEV2 new
FR7.7
FreeRTOS-Plus-TCP
FreeRTOS
2 CVEs0 on KEV2 new
CO9.1
coreMQTT
FreeRTOS
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-102552 | FR FreeRTOS-Plus-TCP FreeRTOS | 5.9 | Oct 16 | Improper verification of the source of a communication channel in FreeRTOS-Plus-TCP DNS resolver |
| CVE-2026-102551 | FR FreeRTOS-Plus-TCP FreeRTOS | 7.7 | Oct 16 | Improper verification of the source of a communication channel in FreeRTOS-Plus-TCP Router Advertisement handling |
| CVE-2026-109588 | FR FreeRTOS-Kernel FreeRTOS | 8.8 | Oct 16 | Numeric truncation in the MPU buffer authorization check in FreeRTOS-Kernel |
| CVE-2026-109587 | FR FreeRTOS-Kernel FreeRTOS | 8.8 | Oct 16 | Incorrect authorization in the Arm Cortex-R82 MPU port in FreeRTOS-Kernel |
| CVE-2026-77237 | FR FreeRTOS-Kernel FreeRTOS | 8.4 | Aug 21 | Missing type validation in xQueueAddToSet in FreeRTOS-Kernel |
| CVE-2026-77236 | FR FreeRTOS-Kernel FreeRTOS | 7.3 | Aug 21 | Missing size validation in SecureContext_AllocateContext in FreeRTOS-Kernel |
| CVE-2026-77235 | FR FreeRTOS-Kernel FreeRTOS | 7.3 | Aug 21 | Missing privilege check in SecureContext_FreeContext in FreeRTOS-Kernel |
| CVE-2026-77234 | FR FreeRTOS-Kernel FreeRTOS | 8.8 | Aug 21 | Improper input validation in FreeRTOS-Kernel timer command handling |
| CVE-2026-8686 | CO coreMQTT FreeRTOS | 9.1 | May 15 | DoS from MQTT v5.0 Deserialization Fault in core MQTT |