CVE-2026-39984

Sigstore Timestamp Authority is a service for issuing RFC 3161 timestamps. Versions 2.0.5 and below contain an authorization bypass vulnerability in the VerifyTimestampResponse function. VerifyTimestampResponse correctly verifies the certificate chain signature, but the TSA-specific constraint...

Oxia's TLS CA certificate chain validation fails with multi-certificate PEM bundles

Summary The trustedCertPool function in the TLS configuration only parses the first PEM block from CA certificate files. When a CA bundle contains multiple certificates e.g., intermediate + root CA, only the first certificate is loaded. This silently breaks certificate chain validation for mTLS...

EUVD-2026-22496

Null pointer dereference in Windows Local Security Authority Subsystem Service LSASS allows an unauthorized attacker to deny service over a network...

EUVD-2026-22378

Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability...

CVE-2026-26155

Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability...

CVE-2026-32071 Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability

...

CVE-2026-32071

CVE-2026-32071 is a Windows Local Security Authority Subsystem Service (LSASS) denial-of-service vulnerability. The affected component is LSASS; the CVSS metrics indicate network-based exploitation with low complexity, no privileges or user interaction required, and an impact on availability (HIG...

CVE-2026-32071 Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability

...

CVE-2026-26155 Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability

...

CVE-2026-26155 Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability

...

CVE-2026-26155

CVE-2026-26155 is a Microsoft Local Security Authority Subsystem Service information disclosure vulnerability. The entry lists a CVSS v3.1 base score 6.5 (MEDIUM) with vector CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N, indicating a Network attack vector, low complexity , and low privileges requ...

Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability

...

Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability

Null pointer dereference in Windows Local Security Authority Subsystem Service LSASS allows an unauthorized attacker to deny service over a network...

Sigstore Timestamp Authority has Improper Certificate Validation in verifier

Authorization bypass via certificate bag manipulation in sigstore/timestamp-authority verifier An authorization bypass vulnerability exists in sigstore/timestamp-authority verifier timestamp-authority/v2/pkg/verification: VerifyTimestampResponse function correctly verifies the certificate chain b...

GHSA-XM5M-WGH2-RRG3 Sigstore Timestamp Authority has Improper Certificate Validation in verifier

Authorization bypass via certificate bag manipulation in sigstore/timestamp-authority verifier An authorization bypass vulnerability exists in sigstore/timestamp-authority verifier timestamp-authority/v2/pkg/verification: VerifyTimestampResponse function correctly verifies the certificate chain b...

EUVD-2026-22813

Sigstore Timestamp Authority has Improper Certificate Validation in verifier...

PT-2026-32735

Name of the Vulnerable Software and Affected Versions Microsoft Local Security Authority Subsystem Service affected versions not specified Description An issue exists that allows attackers to obtain sensitive information and affect the system. Recommendations At the moment, there is no informatio...

Microsoft Windows Local Security Authority Subsystem Service 代码问题漏洞

The Microsoft Windows Local Security Authority Subsystem Service is an internal program of the American company Microsoft, responsible for implementing Windows system security policies. It verifies user identities when a computer or server is logged in, manages user password changes, and generate...

PT-2026-34188

Name of the Vulnerable Software and Affected Versions Oxia versions prior to 0.16.2 Description The trustedCertPool function in the TLS configuration only parses the first PEM block from CA certificate files. When a CA bundle contains multiple certificates, such as an intermediate and a root CA,...

Microsoft Windows Local Security Authority Subsystem Service 安全漏洞

The Microsoft Windows Local Security Authority Subsystem Service is an internal program of the American company Microsoft, responsible for implementing Windows system security policies. It verifies user identities when a computer or server is logged in, manages user password changes, and generate...