CVE-2024-29050

CVE-2024-29050 CVE-2024-29050 是 Windows 加密服务中的一个安全漏洞，特别是在处理证书时的加密操作过程中。该问题源于整数溢出，当对文件大小或缓冲区长度等数据进行计算时，结果超出了变量允许的极限，导致系统错误计算或错误管理内存。 在这种情况下，加密函数错误处理了某些证书数据，导致内存管理不当。攻击者可以通过向系统提供特制的输入（例如，超大的证书或经过操作的数据字段）来利用此漏洞，使系统覆盖内存区域。这可能导致意外行为，例如系统崩溃，或者更严重的情况下，允许攻击者远程执行恶意代码。...

Vulnerability of the Cryptographic Operating System Services in Windows, allowing attackers to disclose protected information

The vulnerability of the Windows Cryptographic Operating System services is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker to disclose the protected information...

EUVD-2026-44138

Exposure of sensitive information to an unauthorized actor in Windows Cryptographic Services allows an authorized attacker to disclose information locally...

EUVD-2026-43936

Exposure of sensitive information to an unauthorized actor in Windows Cryptographic Services allows an authorized attacker to disclose information locally...

EUVD-2026-43848

Improper certificate validation in Windows Cryptographic Services allows an unauthorized attacker to bypass a security feature over a network...

EUVD-2026-43789

Missing release of memory after effective lifetime in Windows Cryptographic Services allows an unauthorized attacker to deny service over a network...

CVE-2026-50681

Exposure of sensitive information to an unauthorized actor in Windows Cryptographic Services allows an authorized attacker to disclose information locally...

CVE-2026-50352

Exposure of sensitive information to an unauthorized actor in Windows Cryptographic Services allows an authorized attacker to disclose information locally...

CVE-2026-50302

Improper certificate validation in Windows Cryptographic Services allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-44806

Missing release of memory after effective lifetime in Windows Cryptographic Services allows an unauthorized attacker to deny service over a network...

CVE-2026-50352 Windows Cryptographic Services Information Disclosure Vulnerability

...

CVE-2026-50302

CVE-2026-50302 is a Windows Cryptographic Services security feature bypass caused by improper certificate validation, allowing a network-based attacker to bypass a security feature. The CVSS v3.1 base score is 4.2 (Medium) with network attack vector and user interaction required. Microsoft and se...

CVE-2026-50302 Windows Cryptographic Services Security Feature Bypass Vulnerability

...

CVE-2026-44806

CVE-2026-44806 : Windows Cryptographic Services vulnerability causing denial of service over the network due to missing release of memory after its effective lifetime. Affected component: Windows Cryptographic Services. Root cause described as missing memory release, leading to potential DoS. Rem...

Windows Cryptographic Services Security Feature Bypass Vulnerability

Improper certificate validation in Windows Cryptographic Services allows an unauthorized attacker to bypass a security feature over a network...

Windows Cryptographic Services Information Disclosure Vulnerability

Exposure of sensitive information to an unauthorized actor in Windows Cryptographic Services allows an authorized attacker to disclose information locally...

CVE-2026-44806: Missing Release of Memory after Effective Lifetime

Missing release of memory after effective lifetime in Windows Cryptographic Services allows an unauthorized attacker to deny service over a network...

CVE-2026-50302: Improper Certificate Validation

Improper certificate validation in Windows Cryptographic Services allows an unauthorized attacker to bypass a security feature over a network...

PT-2026-58302

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description Improper certificate validation in Windows Cryptographic Services allows an unauthorized attacker to bypass a security feature over a network. This issue enables remote attackers to skip the...

CVE-2026-50681: Exposure of Sensitive Information to an Unauthorized Actor

Exposure of sensitive information to an unauthorized actor in Windows Cryptographic Services allows an authorized attacker to disclose information locally...