CVE-2026-89172
Improper protection of physical side channels vulnerability in Microchip AN1044, Microchip AN953, and Microchip SW300052. This issue affect
CVSS
—
Sin CVSS
EPSS
0.2%
p10
KEV
—
Exploit Today
3
0-100
Publicado: 12 sept 2026 · Última mod.: 16 sept 2026 · CWE-1300
0.2%EPSS · 30 días0.2%
2026-09-302026-10-28
Improper protection of physical side channels vulnerability in Microchip AN1044, Microchip AN953, and Microchip SW300052. This issue affects AN1044: through A; AN953: through A; SW300052: through 2.6.
- www.microchip.comhttps://www.microchip.com/en-us/application-notes/an1044
- www.microchip.comhttps://www.microchip.com/en-us/application-notes/an953
- www.microchip.comhttps://www.microchip.com/en-us/development-tool/sw300052
- www.microchip.comhttps://www.microchip.com/en-us/solutions/technologies/embedded-security/how-to-report-potential-product-security-vulnerabilities/side-channel-attack-an1044-an953-sw300052-cryptographic-algorithms
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-180194.3 MED17.6%
——5Side-channel information leakage in Media in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)6dCVE-2026-179785.3 MED20.7%
——6Side-channel information leakage in WebCodecs in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Low)6dCVE-2026-179424.3 MED17.6%
——5Side-channel information leakage in SVG in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)6dCVE-2026-179145.3 MED14.1%
——4Side-channel information leakage in Skia in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Low)6dCVE-2026-179074.3 MED17.6%
——5Side-channel information leakage in Network in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)6dCVE-2026-178594.3 MED17.6%
——5Inappropriate implementation in Favicons in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)6d