Read the docs

AWS

Records384All Threatist records
Exploited (KEV)2In CISA KEV
CVSS critical46CVSS 9.0–10.0
CVSS high198CVSS 7.0–8.9

Exploited now

AWS records in CISA KEV
TI-2026-23989 Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability Priority CRITICAL 93KEV 2026-05-01TI-2023-23979 HTTP/2 Rapid Reset Attack Vulnerability Priority CRITICAL 90KEV 2023-10-10

Components

Products in the NVD configurations · select one to filter the records
Freertos 21 records MEDIUM Amazon Web Services Freertos 14 records MEDIUM Fire Os 13 records MEDIUM Opensearch 11 records HIGH Tough 10 records MEDIUM Freertos-plus-tcp 9 records MEDIUM Blink Xt2 Sync Module Firmware 7 records MEDIUM Athena Odbc 6 records MEDIUM

Records

9 records in Freertos-plus-tcp · all components

TI-2026-06527 CVE-2026-7424

Integer Underflow in DHCPv6 Sub-Option Parser in FreeRTOS-Plus-TCP

Priority LOW 33

Integer underflow in the DHCPv6 sub-option parser in FreeRTOS-Plus-TCP before V4.4.1 and V4.2.6 allows an adjacent network actor to corrupt the device's IPv6 address assignment, DNS configuration, and lease times, and to…

CVSS 4.0HIGH 7.2 Adjacent network No auth No interaction EPSS 0.00223 Published 2026-04-29 Fixed in 4.2.6, 4.4.1 CWE-191
TI-2026-06525 CVE-2026-7422

MAC Address Validation Bypass in FreeRTOS-Plus-TCP IPv4 and IPv6 Packet Processing

Priority LOW 30

Insufficient packet validation in FreeRTOS-Plus-TCP before V4.2.6 and V4.4.1 allows an adjacent network actor to bypass all checksum and minimum-size validation by spoofing the Ethernet source MAC address to match one of…

CVSS 4.0HIGH 7.1 Adjacent network No auth No interaction EPSS 0.00177 Published 2026-04-29 Fixed in 4.2.6, 4.4.1 CWE-290
TI-2026-06529 CVE-2026-7426

Out-of-Bounds Write via Unsanitized Prefix Length in Router Advertisement Processing in FreeRTOS-Plus-TCP

Priority LOW 27

Insufficient validation of the prefix length field in IPv6 Router Advertisement processing in FreeRTOS-Plus-TCP before V4.2.6 and V4.4.1 allows an adjacent network actor to cause memory corruption by sending a crafted Ro…

CVSS 4.0MEDIUM 6.1 Adjacent network No auth No interaction EPSS 0.00246 Published 2026-04-29 Fixed in 4.2.6, 4.4.1 CWE-787
TI-2026-06528 CVE-2026-7425

Out-of-Bounds Read in Router Advertisement Option Parser in FreeRTOS-Plus-TCP

Priority LOW 26

Insufficient option length validation in the IPv6 Router Advertisement parser in FreeRTOS-Plus-TCP before V4.2.6 and V4.4.1 allows an adjacent network actor to cause a denial of service (device crash) by sending a crafte…

CVSS 4.0MEDIUM 6.0 Adjacent network No auth No interaction EPSS 0.00233 Published 2026-04-29 Fixed in 4.2.6, 4.4.1 CWE-125
TI-2026-06526 CVE-2026-7423

Integer Underflow in ICMP Echo Reply Processing in FreeRTOS-Plus-TCP

Priority LOW 26

Integer underflow in the ICMP and ICMPv6 echo reply handlers in FreeRTOS-Plus-TCP before V4.4.1 and V4.2.6 allows an adjacent network user to cause a denial of service (device crash) when outgoing ping support is enabled…

CVSS 4.0MEDIUM 6.0 Adjacent network No auth No interaction EPSS 0.00221 Published 2026-04-29 Fixed in 4.2.6, 4.4.1 CWE-191
TI-2025-10648 CVE-2025-11618

Invalid Pointer Dereference when receiving UDP/IPv6 packets in FreeRTOS-Plus-TCP

Priority LOW 24

A missing validation check in FreeRTOS-Plus-TCP's UDP/IPv6 packet processing code can lead to an invalid pointer dereference when receiving a UDP/IPv6 packet with an incorrect IP version field in the packet header.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00346 Published 2025-10-10 Fixed in 4.3.4 CWE-476
Open these records in search →