CVE-2026-89172
Improper protection of physical side channels vulnerability in Microchip AN1044, Microchip AN953, and Microchip SW300052. This issue affect
CVSS
—
No CVSS
EPSS
—
KEV
—
Exploit Today
0
0-100
Published: Sep 12, 2026 · Last modified: Sep 12, 2026 · CWE-1300
Not enough EPSS history yet.
Improper protection of physical side channels vulnerability in Microchip AN1044, Microchip AN953, and Microchip SW300052. This issue affects AN1044: through A; AN953: through A; SW300052: through 2.6.
- www.microchip.comhttps://www.microchip.com/en-us/application-notes/an1044
- www.microchip.comhttps://www.microchip.com/en-us/application-notes/an953
- www.microchip.comhttps://www.microchip.com/en-us/development-tool/sw300052
- www.microchip.comhttps://www.microchip.com/en-us/solutions/technologies/embedded-security/how-to-report-potential-product-security-vulnerabilities/side-channel-attack-an1044-an953-sw300052-cryptographic-algorithms
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-180194.3 MED5.8%
——2Side-channel information leakage in Media in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)40dCVE-2026-179785.3 MED11.4%
——3Side-channel information leakage in WebCodecs in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Low)40dCVE-2026-179424.3 MED10.1%
——3Side-channel information leakage in SVG in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)40dCVE-2026-179145.3 MED12.5%
——4Side-channel information leakage in Skia in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Low)40dCVE-2026-179074.3 MED9.1%
——3Side-channel information leakage in Network in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)40dCVE-2026-178594.3 MED17.6%
——5Inappropriate implementation in Favicons in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)40d