CVE-2026-8863

CVE-2026-8863 Collection of the signed UEFI Secure Boot shim binaries affected by CVE-2026-8863, with the embedded shim version, Authenticode signer and revocation hashes of each image. Releases that ship the byte-identical signed shim are collapsed onto a single row — one Authenticode hash is on...

CVE-2026-49450

Joplin Desktop for Windows versions prior to 3.7.2 omit the publisherName field from packages/app-desktop/package.json, causing the generated app-update.yml to make NsisUpdater.verifySignature() skip the Authenticode signer comparison. An attacker controlling the update delivery path can substitu...