Microchip
Vulnerability activity for Microchip: what is being exploited, what was published lately, and when the next patch release is due.
Last 30 days
- CVEs
- 0
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 90 days
- CVEs
- 1
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 365 days
- CVEs
- 10
- Critical (CVSS 9+)
- 1
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Exploited now
None of this vendor's CVEs are on CISA's known-exploited list.
Recent
- 5.6MediumSep 12, 2026Microchip AN1044CVE-2026-89172Improper protection of physical side channels vulnerability in Microchip AN1044, Microchip AN953, and Microchip SW300052. This issue affects AN1044: through A; AN953: through A; SW300052: through 2.6.
- 5.4MediumJun 19, 2026Microchip gridtime 3000 firmwareCVE-2026-12622The GridTime 3000 GNSS Time Server has an open redirect vulnerability in the password change form submission. This issue affects GridTime 3000: from 1.0r0.03 through 1.1r0.0.
- 5.4MediumJun 19, 2026Microchip gridtime 3000 firmware XSSCVE-2026-12621Improper neutralization of input during web page generation XSS vulnerability in the GridTime 3000 (password reset form) allows XSS. This issue affects GridTime 3000: from 1.0r0.03 before 1.2r0.0.
- 6.5MediumJun 19, 2026Microchip gridtime 3000 firmware Information disclosureCVE-2026-12620The GridTime 3000 GNSS Time Server leaks the access token in the URL parameters of some endpoints. This issue affects GridTime 3000: from 1.0r0.03 through 1.1r0.0.
- 5.4MediumJun 19, 2026Microchip gridtime 3000 firmware XSSCVE-2026-12619Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Microchip GridTime 3000 allows Cross-Site Scripting (XSS). This issue affects GridTime 3000: from 1.0r0.03 through 1.1r0.0.
- 8.8HighApr 16, 2026Microchip istax Privilege escalationCVE-2026-2336A privilege escalation vulnerability in Microchip IStaX allows an authenticated low-privileged user to recover a shared per-device cookie secret from their own webstax_auth session cookie and forge a new cookie with administrative privileges.This issue affects IStaX before 2026.03.
- 9.8CriticalMar 28, 2026Microchip timeprovider 4100 firmware Auth bypass / access controlCVE-2025-9497Use of Hard-coded Credentials vulnerability in Microchip Time Provider 4100 allows Malicious Manual Software Update.This issue affects Time Provider 4100: before 2.5.0.
- 6.1MediumFeb 28, 2026Microchip timepictra XSSCVE-2026-3010Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Microchip TimePictra allows Query System for Information.This issue affects TimePictra: from 11.0 through 11.3 SP2.
- 7.5HighFeb 28, 2026Microchip timepictra Auth bypass / access controlCVE-2026-2844Missing Authentication for Critical Function vulnerability in Microchip TimePictra allows Configuration/Environment Manipulation.This issue affects TimePictra: from 11.0 through 11.3 SP2.
- 4.1MediumFeb 24, 2026Microchip timeprovider 4100 firmwareCVE-2025-47904Download of Code Without Integrity Check vulnerability in Microchip Time Provider 4100 allows Malicious Manual Software Update.This issue affects Time Provider 4100: before 2.5.
Top products
- gridtime 3000 firmware4 CVEs in the last year
- timeprovider 4100 firmware2 CVEs in the last year, 1 critical
- timepictra2 CVEs in the last year
- istax1 CVE in the last year
- AN10441 CVE in the last year
Counts cover CVEs and advisories Watch Floor tracks, by the date they became news. Updated every 10 minutes.