CVE-2026-77235(amazon / freertos)

LOWCVSS 8.3 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Missing privilege verification in the secure context cleanup handler in FreeRTOS-Kernel before 11.3.1 might allow local users to cause a use-after-free condition in secure-world memory via the SVC handler for secure context deallocation. To remediate this issue, users should upgrade to version 11.3.1 or later.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-416

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • freertos

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • 1 total mentions across 1 day

Affected systems

Vendors
Products
freertos

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-10-20: 110-20
Full discourse1 post
  • DFIR Lab@DFIR_Lab

    🚨 CVE-2026-77235 | CVSS 7.3 HIGH Use-after-free flaw in FreeRTOS-Kernel <11.3.1 allows local privilege escalation via secure context cleanup handler. ✅ Patch: Upgrade to v11.3.1+ #CVE #PatchNow #ThreatIntel https://t.co/Q8jViGPF4w

    0000014
    151 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
OSamazonfreertos---

Explore more