CVE-2023-36907 Windows Cryptographic Services Information Disclosure Vulnerability

...

You Can’t Rush Post-Quantum-Computing Cryptography Standards

I just read an article complaining that NIST is taking too long in finalizing its post-quantum-computing cryptography standards. This process has been going on since 2016, and since that time there has been a huge increase in quantum technology and an equally large increase in quantum understandi...

CVE-2023-21626

Cryptographic issue in HLOS due to improper authentication while performing key velocity checks using more than one key...

CVE-2023-21652

Cryptographic issue in HLOS as derived keys used to encrypt/decrypt information is present on stack after use...

Stack overflow

Cryptographic issue in HLOS as derived keys used to encrypt/decrypt information is present on stack after use...

Authentication flaw

Cryptographic issue in HLOS due to improper authentication while performing key velocity checks using more than one key...

CVE-2023-21652 Key Management Errors in HLOS

Cryptographic issue in HLOS as derived keys used to encrypt/decrypt information is present on stack after use...

CVE-2023-21652 Key Management Errors in HLOS

Cryptographic issue in HLOS as derived keys used to encrypt/decrypt information is present on stack after use...

CVE-2023-21652

CVE-2023-21652 describes a cryptographic issue in HLOS where derived keys used to encrypt/decrypt information remain on the stack after use. The vulnerability is noted across multiple sources (e.g., Red Hat, NVD, PRION/Vuln enrichment) with the CVSS v3.1 base metrics indicating HIGH impact for co...

CVE-2023-21626

CVE-2023-21626 describes a cryptographic issue in HLOS caused by improper authentication during key velocity checks when multiple keys are used. Connected sources indicate the vulnerability affects Qualcomm closed‑source components in Android’s HLOS, with a high impact on confidentiality and inte...

CVE-2023-21626 Improper Authentication in HLOS.

Cryptographic issue in HLOS due to improper authentication while performing key velocity checks using more than one key...

CVE-2023-21626 Improper Authentication in HLOS.

Cryptographic issue in HLOS due to improper authentication while performing key velocity checks using more than one key...

Windows Cryptographic Services Information Disclosure Vulnerability

...

Windows Cryptographic Services Information Disclosure Vulnerability

...

PT-2023-4515 · Phoenix Contact · Phoenix Contact Wp 6Xxx Series Web Panels

Name of the Vulnerable Software and Affected Versions: PHOENIX CONTACT WP 6xxx series web panels versions prior to 4.0.10 Description: The issue is related to the use of hardcoded credentials in PHOENIX CONTACT WP 6xxx series web panels. An authenticated, remote attacker with admin privileges can...

Microsoft Windows Cryptographic Services Security Vulnerability

Microsoft Windows Cryptographic Services is an encryption service provider program from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Cryptographic Services. An attacker could exploit this vulnerability to obtain sensitive information. The following products and...

EulerOS 2.0 SP9 : libssh (EulerOS-SA-2023-2586)

According to the versions of the libssh package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A NULL pointer dereference was found In libssh during re-keying with algorithm guessing. This issue may allow an authenticated client to cause a...

PT-2023-4381 · Microsoft · Windows Cryptographic Services +1

Name of the Vulnerable Software and Affected Versions: Windows Cryptographic Services affected versions not specified Description: The issue is related to a lack of protection for service data in the Windows Cryptographic Services, which can be exploited to disclose protected information. This...

Microsoft Windows Cryptographic Services Security Vulnerability

Microsoft Windows Cryptographic Services is an encryption service provider program from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Cryptographic Services. An attacker could exploit this vulnerability to obtain sensitive information. The following products and...

PT-2023-4382 · Microsoft · Windows Cryptographic Services +1

Name of the Vulnerable Software and Affected Versions: Windows Cryptographic Services affected versions not specified Description: The issue is related to a lack of protection for service data in the Windows Cryptographic Services, which can be exploited to disclose protected information. This...