CVE-2026-58638

Missing cryptographic step in Windows Boot Loader allows an authorized attacker to bypass a security feature locally...

CVE-2026-50681

Exposure of sensitive information to an unauthorized actor in Windows Cryptographic Services allows an authorized attacker to disclose information locally...

CVE-2026-50352

Exposure of sensitive information to an unauthorized actor in Windows Cryptographic Services allows an authorized attacker to disclose information locally...

CVE-2026-50302

Improper certificate validation in Windows Cryptographic Services allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-55144

Missing cryptographic step in Windows CryptoAPI allows an authorized attacker to perform tampering locally...

CVE-2026-50303

Use of a cryptographic primitive with a risky implementation in Windows Key Guard allows an authorized attacker to bypass a security feature locally...

CVE-2026-44806

Missing release of memory after effective lifetime in Windows Cryptographic Services allows an unauthorized attacker to deny service over a network...

EUVD-2026-44315

Missing cryptographic step in Windows Boot Loader allows an authorized attacker to bypass a security feature locally...

CVE-2026-50352

CVE-2026-50352 affects Windows Cryptographic Services. Description: Exposure of sensitive information to an unauthorized actor allows a locally authenticated attacker to disclose information. Impact: information disclosure (CONFIDENTIALITY) with LOCAL attack vector; CVSS 3.1 base 5.5 (AV:L/AC:L/P...

CVE-2026-50352 Windows Cryptographic Services Information Disclosure Vulnerability

...

CVE-2026-50352 Windows Cryptographic Services Information Disclosure Vulnerability

...

CVE-2026-50302 Windows Cryptographic Services Security Feature Bypass Vulnerability

...

CVE-2026-50302

CVE-2026-50302 is a Windows Cryptographic Services security feature bypass caused by improper certificate validation, allowing a network-based attacker to bypass a security feature. The CVSS v3.1 base score is 4.2 (Medium) with network attack vector and user interaction required. Microsoft and se...

CVE-2026-50302 Windows Cryptographic Services Security Feature Bypass Vulnerability

...

CVE-2026-50303

CVE-2026-50303 describes a vulnerability in Windows Key Guard where use of a cryptographic primitive with a risky implementation enables an authorized local attacker to bypass a security feature. Affected component: Windows Key Guard cryptographic handling; root cause: risky implementation of the...

CVE-2026-50303

Use of a cryptographic primitive with a risky implementation in Windows Key Guard allows an authorized attacker to bypass a security feature locally...

CVE-2026-44806

CVE-2026-44806 : Windows Cryptographic Services vulnerability causing denial of service over the network due to missing release of memory after its effective lifetime. Affected component: Windows Cryptographic Services. Root cause described as missing memory release, leading to potential DoS. Rem...

CVE-2026-55144

Missing cryptographic step in Windows CryptoAPI allows an authorized attacker to perform tampering locally...

CVE-2026-55144

The CVE-2026-55144 vulnerability concerns Windows Cryptography API: Next Generation (CNG). The issue is a missing cryptographic step in the Windows CryptoAPI that could allow an authorized, local attacker to tamper data, with impact to confidentiality and integrity (CVSSv3.1: Local attack, Low sk...

Windows Secure Channel Information Disclosure Vulnerability

Exposure of sensitive information to an unauthorized actor in Windows Cryptographic Services allows an authorized attacker to disclose information locally...