Vulnerabilidades em Legion of the Bouncy Castle Inc.
85 resultadosAnálise Vexday
A Legion of the Bouncy Castle Inc. apresenta 13 vulnerabilidades catalogadas, com apenas 1 crítica e nenhuma sob ataque ativo no momento. A fraqueza dominante (CWE-400: Uncontrolled Resource Consumption) sugere problemas de negação de serviço, e o ritmo recente de 2 publicações em 90 dias indica atividade contínua de descoberta, mas sem pressão imediata de exploração em campo.
CVE-2026-63571HIGHAttribute certificate path validation does not verify the attribute certificate's signatureEPSS 0.1%CVE-2026-15997LOWNative ARM SHA3 / SHAKE `restoreFullState` fails to detect size_t underflow in a crafted encoded stateEPSS 0.1%CVE-2026-71888HIGHCMS AuthenticatedData exposes attacker-inserted authAttrs when digestAlgorithm is absentEPSS 0.1%CVE-2026-18040MEDIUMHQC leaks private key information through secret-indexed GF(2^8) tables and a secret-dependent fixed-weight samplerEPSS 0.1%CVE-2026-71887HIGHOpenPGP data signature accepted from a signing subkey without cross-certificationEPSS 0.1%