Vendor
FreeRTOS
12 known vulnerabilities in products by FreeRTOS, 0 of them actively exploited (CISA KEV).
Key figures
12
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
6
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-102551 | FreeRTOS-Plus-TCP: Improper Verification of Source of a Communication Channel | 7.7 | |
| Critical | CVE-2026-109588 | Numeric truncation in the MPU buffer authorization check in FreeRTOS-Kernel | 8.8 | |
| Critical | CVE-2026-109587 | Incorrect authorization in the Arm Cortex-R82 MPU port in FreeRTOS-Kernel | 8.8 | |
| Critical | CVE-2024-38373 | FreeRTOS-Plus-TCP Buffer Over-Read in DNS Response Parser | 9.6 | |
| High | CVE-2026-102552 | Improper verification of the source of a communication channel in FreeRTOS-Plus-TCP DNS resolver | 5.9 | |
| Critical | CVE-2026-8686 | DoS from MQTT v5.0 Deserialization Fault in core MQTT | 9.1 | |
| High | CVE-2026-119086 | Missing type validation in xQueueSelectFromSet in FreeRTOS-Kernel | 6.5 | |
| Critical | CVE-2026-77234 | Improper input validation in FreeRTOS-Kernel timer command handling | 8.8 | |
| High | CVE-2026-77236 | Missing size validation in SecureContext_AllocateContext in FreeRTOS-Kernel | 7.3 | |
| High | CVE-2026-77235 | Missing privilege check in SecureContext_FreeContext in FreeRTOS-Kernel | 7.3 | |
| High | CVE-2026-77237 | Missing type validation in xQueueAddToSet in FreeRTOS-Kernel | 6.5 | |
| High | CVE-2024-28115 | Privilege Escalation in FreeRTOS Kernel ARMv7-M MPU ports and ARMv8-M ports with MPU support enabled | 8.8 |
Products
| FreeRTOS-Kernel | 8 | 0 |
| FreeRTOS-Plus-TCP | 3 | 0 |