Skip to main content
CVE-2026-98761VulnerabilityPublished Updated

Microsoft · usb: typec: tcpm: recover after failure to start the frs ams

Affects MicrosoftSource GCVE Database

0
Authoritative record:CVE-2026-98761· Low

Not known to be exploited · fixed in d6b0cce612636f79f2cf0652fce40a0cbff7f0ed : update Microsoft when convenient.

Data as of 28 Oct 2026, 09:12 UTC

Severity
Low

Rated by Threat Radar · CVSS not yet scored by NVD

Patch
Available – fixed in d6b0cce612636f79f2cf0652fce40a0cbff7f0ed, b2ed8643face247e513fad12e193378ba67a61a1, ae8aae45a39fcf2c64813652fcb062eace220712 +2

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 18 Oct 2026

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponised: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.

What to do

Upgrade to a fixed release listed under Affected software.

Affected software

ProductAffectedFixed in
LinuxLinuxAffected
  • ≥ 0908c5aca31eb5e0c72d7a5dba422629b88e877d, < d6b0cce612636f79f2cf0652fce40a0cbff7f0ed
Fixed in
  • d6b0cce612636f79f2cf0652fce40a0cbff7f0ed
LinuxLinuxAffected
  • ≥ 0908c5aca31eb5e0c72d7a5dba422629b88e877d, < b2ed8643face247e513fad12e193378ba67a61a1
Fixed in
  • b2ed8643face247e513fad12e193378ba67a61a1
LinuxLinuxAffected
  • ≥ 0908c5aca31eb5e0c72d7a5dba422629b88e877d, < ae8aae45a39fcf2c64813652fcb062eace220712
Fixed in
  • ae8aae45a39fcf2c64813652fcb062eace220712
LinuxLinuxAffected
  • ≥ 0908c5aca31eb5e0c72d7a5dba422629b88e877d, < 90156585765b29304f07b0e4a1c56a969876fcfc
Fixed in
  • 90156585765b29304f07b0e4a1c56a969876fcfc
LinuxLinuxAffected
  • ≥ 0908c5aca31eb5e0c72d7a5dba422629b88e877d, < 184d842121e7d1fbc3a81895f36f72fa27444163
Fixed in
  • 184d842121e7d1fbc3a81895f36f72fa27444163
LinuxLinuxAffected
  • =5.12
Fixed in–

Description

This entry references a vulnerability identified as CVE-2026-98761 related to USB Type-C TCPM (Type-C Port Manager) recovery after failure to start the Fast Role Swap (FRS) Alternate Mode Signaling (AMS). The description lacks technical details about the nature or impact of the vulnerability. The affected versions are Microsoft products version 3.0 and 4.0. No CVSS score or detailed impact information is provided.

References

Community reviews

Loading reviews…