Windows Cryptographic Services Security Feature Bypass Vulnerability

Improper certificate validation in Windows Cryptographic Services allows an unauthorized attacker to bypass a security feature over a network...

Windows Cryptography API: Next Generation (CNG) Tampering Vulnerability

Missing cryptographic step in Windows CryptoAPI allows an authorized attacker to perform tampering locally...

.NET Security Feature Bypass Vulnerability

Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network...

Windows Cryptographic Services Information Disclosure Vulnerability

Exposure of sensitive information to an unauthorized actor in Windows Cryptographic Services allows an authorized attacker to disclose information locally...

Windows Key Guard Security Feature Bypass Vulnerability

Use of a cryptographic primitive with a risky implementation in Windows Key Guard allows an authorized attacker to bypass a security feature locally...

Windows Secure Channel Denial of Service Vulnerability

Missing release of memory after effective lifetime in Windows Cryptographic Services allows an unauthorized attacker to deny service over a network...

kernel security, bug fix, and enhancement update

An update is available for kernel. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...

PT-2026-58302

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description Improper certificate validation in Windows Cryptographic Services allows an unauthorized attacker to bypass a security feature over a network. This issue enables remote attackers to skip the...

PT-2026-58673

Missing cryptographic step in Windows Boot Loader allows an authorized attacker to bypass a security feature locally...

PT-2026-58189

Name of the Vulnerable Software and Affected Versions Windows Key Guard affected versions not specified Description A risky implementation of a cryptographic primitive in Windows Key Guard allows an authorized local attacker to bypass a security feature and expose secrets. Recommendations At the...

CVE-2026-56451: Improper Verification of Cryptographic Signature

A vulnerability has been identified in Opcenter X All versions V2604. Affected applications do not properly validate the algorithm specified in the JSON Web Token JWT header. This could allow an unauthenticated remote attacker to forge arbitrary JWT, bypass authentication mechanisms and impersona...

CVE-2026-50302: Improper Certificate Validation

Improper certificate validation in Windows Cryptographic Services allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-48758: Improper Verification of Cryptographic Signature

sigstore-js provides JavaScript libraries for interacting with Sigstore services. Prior to 3.2.1, the preAuthEncoding function in @sigstore/core uses Node.js ascii encoding when converting the PAE string to bytes, allowing payloadType to be mutated after signing without invalidating the signature...

CVE-2026-44806: Missing Release of Memory after Effective Lifetime

Missing release of memory after effective lifetime in Windows Cryptographic Services allows an unauthorized attacker to deny service over a network...

CVE-2026-55144: Missing Cryptographic Step

Missing cryptographic step in Windows CryptoAPI allows an authorized attacker to perform tampering locally...

CVE-2026-48815: Improper Verification of Cryptographic Signature

sigstore-js provides JavaScript libraries for interacting with Sigstore services. Prior to 4.1.1, the documented certificateOIDs option in sigstore.verify is accepted by the public API but discarded before verification, so required certificate extension OIDs are never checked and applications...

PT-2026-58698

Name of the Vulnerable Software and Affected Versions .NET versions prior to 8.0.29 .NET versions prior to 9.0.18 .NET versions prior to 10.0.10 Description Improper verification of cryptographic signatures allows an unauthenticated attacker to remotely bypass security protections over a network...

CVE-2026-50681: Exposure of Sensitive Information to an Unauthorized Actor

Exposure of sensitive information to an unauthorized actor in Windows Cryptographic Services allows an authorized attacker to disclose information locally...

PT-2026-58337

Name of the Vulnerable Software and Affected Versions Windows Cryptographic Services affected versions not specified Description An issue in Windows Cryptographic Services allows an authorized attacker with local access to disclose sensitive information. Recommendations At the moment, there is no...

PT-2026-58501

Name of the Vulnerable Software and Affected Versions Windows Cryptographic Services affected versions not specified Description An issue in Windows Cryptographic Services allows an authorized attacker to locally disclose sensitive information to an unauthorized actor. Recommendations At the...