Which CVEs affect FreeRTOS 10.0.1?
| CVE | Severity | CVSS | Fixed from | Note |
|---|---|---|---|---|
| CVE-2021-31571 | critical | 9.8 | 10.4.3 | per vulnerability databases |
| CVE-2021-31572 | critical | 9.8 | 10.4.3 | per vulnerability databases |
| CVE-2021-32020 | critical | 9.8 | 10.4.3 | per vulnerability databases |
| CVE-2026-77234 | critical | 9.3 | 11.3.1 | per vulnerability databases |
| CVE-2026-77237 | high | 8.4 | 11.3.1 | per vulnerability databases |
| CVE-2018-16525 | high | 8.1 | not stated | per vulnerability databases |
| CVE-2018-16526 | high | 8.1 | not stated | per vulnerability databases |
| CVE-2018-16601 | high | 8.1 | not stated | per vulnerability databases |
| CVE-2024-28115 | high | 7.8 | 10.6.2 | per vulnerability databases |
| CVE-2018-16523 | high | 7.4 | not stated | per vulnerability databases |
| CVE-2018-16524 | medium | 5.9 | not stated | per vulnerability databases |
| CVE-2018-16527 | medium | 5.9 | not stated | per vulnerability databases |
| CVE-2018-16598 | medium | 5.9 | not stated | per vulnerability databases |
| CVE-2018-16599 | medium | 5.9 | not stated | per vulnerability databases |
| CVE-2018-16600 | medium | 5.9 | not stated | per vulnerability databases |
| CVE-2018-16602 | medium | 5.9 | not stated | per vulnerability databases |
| CVE-2018-16603 | medium | 5.9 | not stated | per vulnerability databases |
Which FreeRTOS version do I need to upgrade to?
Fixed in FreeRTOS 10.4.3: 3 CVEs of this version.
Fixed in FreeRTOS 10.6.2: 1 CVE of this version.
Fixed in FreeRTOS 11.3.1: 2 CVEs of this version.
No fix version stated: 11.
What changed against FreeRTOS 10.0.0?
No CVE of 10.0.0 dropped out in 10.0.1.
No CVE was added in 10.0.1.
What does the number mean for a device?
Counted are the CVEs public sources name for FreeRTOS version 10.0.1 (NVD). "Confirmed by the vendor" means the CVE record or advisory comes from the vendor itself and names this version as affected. Third-party records are counted but not marked as confirmed.
Whether a CVE is exploitable in a given device depends on which functions of the library the build contains and how they are configured. The list shows what is known for the version.
Questions
How many CVEs does FreeRTOS 10.0.1 have?
As of 13 Nov 2026, 17 CVEs are known for FreeRTOS 10.0.1, 4 critical and 6 high. 11.3.1, the newest listed version, lists none of them.
From which version are the CVEs of FreeRTOS 10.0.1 fixed?
No newer listed version is free of all 17 CVEs. The "Fixed from" column names the fix version per CVE for this release line where a source states one.
Sources
- [1]NVD