CVE Catalog

CVE-2026-20962

MediumCVSS 4.4
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.40%

33th percentile - higher than 33% of all known CVEs

Summary

Use of uninitialized resource in Dynamic Root of Trust for Measurement (DRTM) allows an authorized attacker to disclose information locally.

Risk Assessment

Risk of information disclosure by an authorized local user due to an uninitialized resource in DRTM.

Recommendation

Apply the security update from the vendor for the DRTM component.

Original NVD description (English source)

Use of uninitialized resource in Dynamic Root of Trust for Measurement (DRTM) allows an authorized attacker to disclose information locally.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS