Lucene search
+L

7 matches found

osv_ubuntu
osv_ubuntu
•added 2026/08/03 4:16 a.m.•24 views

UBUNTU-CVE-2026-12817

In Bouncy Castle for Java before 1.85, OpenPGP AEAD decryption skips final tag on chunk-aligned data. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bcpg-fips 1.0.13 1.0.X series, 2.0.13 2.0.X series and 2.1.13 2.1.X series...

8.7CVSS7.2AI score0.00169EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2026/08/03 4:16 a.m.•20 views

CVE-2026-12817

In Bouncy Castle for Java before 1.85, OpenPGP AEAD decryption skips final tag on chunk-aligned data. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bcpg-fips 1.0.13 1.0.X series, 2.0.13 2.0.X series and 2.1.13 2.1.X series...

8.7CVSS7.2AI score0.00169EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/08/03 2:54 a.m.•15 views

CVE-2026-12817 OpenPGP AEAD decryption skips final tag on chunk-aligned data

In Bouncy Castle for Java before 1.85, OpenPGP AEAD decryption skips final tag on chunk-aligned data. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bcpg-fips 1.0.13 1.0.X series, 2.0.13 2.0.X series and 2.1.13 2.1.X series...

8.7CVSS7.2AI score0.00169EPSS
SaveExploits0References2
CVE
CVE
•added 2026/08/03 2:54 a.m.•122 views

CVE-2026-12817

CVE-2026-12817 affects Bouncy Castle for Java prior to 1.85, including Java LTS builds before 2.73.12 and BC-FJA before bcpg-fips 1.0.13 (1.0.x), 2.0.13 (2.0.x), and 2.1.13 (2.1.x). The flaw: OpenPGP AEAD decryption skips the final tag on chunk-aligned data, as described in multiple sources. This...

8.7CVSS7.2AI score0.00169EPSS
SaveExploits0References2Affected Software3
Cvelist
Cvelist
•added 2026/08/03 2:54 a.m.•72 views

CVE-2026-12817 OpenPGP AEAD decryption skips final tag on chunk-aligned data

In Bouncy Castle for Java before 1.85, OpenPGP AEAD decryption skips final tag on chunk-aligned data. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bcpg-fips 1.0.13 1.0.X series, 2.0.13 2.0.X series and 2.1.13 2.1.X series...

8.7CVSS0.00169EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2026/08/03 2:54 a.m.•33 views

CVE-2026-12817 OpenPGP AEAD decryption skips final tag on chunk-aligned data

In Bouncy Castle for Java before 1.85, OpenPGP AEAD decryption skips final tag on chunk-aligned data. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bcpg-fips 1.0.13 1.0.X series, 2.0.13 2.0.X series and 2.1.13 2.1.X series...

8.7CVSS5.8AI score
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/03 12:00 a.m.•9 views

CVE-2026-12817: Improper Validation of Integrity Check Value

In Bouncy Castle for Java before 1.85, OpenPGP AEAD decryption skips final tag on chunk-aligned data. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bcpg-fips 1.0.13 1.0.X series, 2.0.13 2.0.X series and 2.1.13 2.1.X series...

8.7CVSS7.3AI score0.00169EPSS
SaveExploits0References4
Rows per page
Query Builder