CyberSec.Space Logo
Back to CVE Browser

CVE-2021-27562

🔥 Known Exploited (CISA KEV)MEDIUM
5.5
CVSS Severity Score
EPSS Score68.1870%
EPSS Percentile96.24th
Published2021-05-25
Last Modified2026-06-05
Data SourcesNVDCISA KEVFIRST.org EPSS

Vulnerability Description

In Arm Trusted Firmware M through 1.2, the NS world may trigger a system halt, an overwrite of secure data, or the printing out of secure data when calling secure functions under the NSPE handler mode.

Affected Platforms (CPE)

💻
Trustedfirmware

Trusted Firmware M

<= 1.2.0

References & Advisories

🔗 https://developer.arm.com/support/arm-security-updates
🔗 https://git.trustedfirmware.org/TF-M/trusted-firmware-m.git/tree/docs/security/security_advisories/svc_caller_sp_fetching_vulnerability.rst
🔗 https://developer.arm.com/support/arm-security-updates
🔗 https://git.trustedfirmware.org/TF-M/trusted-firmware-m.git/tree/docs/security/security_advisories/svc_caller_sp_fetching_vulnerability.rst
🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-27562

Related Security Intelligence Articles

Daily Global Cyber Threat Intelligence Digest — July 30, 2026

Today’s threat intelligence covers Ruby on Rails CVE-2026-66066 arbitrary file read, Gitea CVE-2026-60004 Git hook command execution, coordinated attacks on Minnesota water systems, Ruflo MCP Bridge RCE, and Firefox CVE-2026-10702.

2026-07-30

Daily Global Cyber Threat Intelligence Digest — July 28, 2026

Today’s threat intelligence covers the Certighost CVE-2026-54121 AD CS domain-takeover chain, vBulletin CVE-2026-61511 pre-auth RCE, the expanding Dysphoria botnet, and the DentaQuest and Fairlife breach updates.

2026-07-28

Weekly Cybersecurity News: Jul 27, 2026

Weekly cybersecurity news covering active exploitation of Check Point SmartConsole CVE-2026-16232, Qilin ransomware leveraging PAN-OS GlobalProtect vulnerabilities, Russian LAUNDRY BEAR targeting Zimbra email servers, and FakeGit malicious repositories.

2026-07-27

Related Vulnerabilities

CVE-2026-672017.7

V through 0.5.2, fixed in commit 85859f0, contains a server-side request forgery (SSRF) bypass vulnerability that allows attackers...

CVE-2026-24823.1

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is vulnerable to cross-site request forgery which could allow...

CVE-2026-182575.6

Improper validity period check for root issuer certificate in CycloneCrypto cryptographic wrapper of S2OPC allows a certificate is...

CVE-2026-592477.6

Insufficient Verification of Data Authenticity vulnerability in Gleam allows an adversary in the middle to substitute forged Hex p...