Windows Secure Channel Information Disclosure Vulnerability

Exposure of sensitive information to an unauthorized actor in Windows Cryptographic Services allows an authorized attacker to disclose information locally...

Windows Cryptographic Services Security Feature Bypass Vulnerability

Improper certificate validation in Windows Cryptographic Services allows an unauthorized attacker to bypass a security feature over a network...

Windows Secure Channel Denial of Service Vulnerability

Missing release of memory after effective lifetime in Windows Cryptographic Services allows an unauthorized attacker to deny service over a network...

.NET Security Feature Bypass Vulnerability

Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network...

kernel security, bug fix, and enhancement update

An update is available for kernel. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...

CVE-2026-55144: Missing Cryptographic Step

Missing cryptographic step in Windows CryptoAPI allows an authorized attacker to perform tampering locally...

PT-2026-58189

Name of the Vulnerable Software and Affected Versions Windows Key Guard affected versions not specified Description A risky implementation of a cryptographic primitive in Windows Key Guard allows an authorized local attacker to bypass a security feature and expose secrets. Recommendations At the...

PT-2026-58337

Name of the Vulnerable Software and Affected Versions Windows Cryptographic Services affected versions not specified Description An issue in Windows Cryptographic Services allows an authorized attacker with local access to disclose sensitive information. Recommendations At the moment, there is no...

CVE-2026-58638: Missing Cryptographic Step

Missing cryptographic step in Windows Boot Loader allows an authorized attacker to bypass a security feature locally...

CVE-2026-50352: Exposure of Sensitive Information to an Unauthorized Actor

Exposure of sensitive information to an unauthorized actor in Windows Cryptographic Services allows an authorized attacker to disclose information locally...

CVE-2026-50302: Improper Certificate Validation

Improper certificate validation in Windows Cryptographic Services allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-50303: Use of a Cryptographic Primitive with a Risky Implementation

Use of a cryptographic primitive with a risky implementation in Windows Key Guard allows an authorized attacker to bypass a security feature locally...

CVE-2026-56451: Improper Verification of Cryptographic Signature

A vulnerability has been identified in Opcenter X All versions V2604. Affected applications do not properly validate the algorithm specified in the JSON Web Token JWT header. This could allow an unauthenticated remote attacker to forge arbitrary JWT, bypass authentication mechanisms and impersona...

PT-2026-58501

Name of the Vulnerable Software and Affected Versions Windows Cryptographic Services affected versions not specified Description An issue in Windows Cryptographic Services allows an authorized attacker to locally disclose sensitive information to an unauthorized actor. Recommendations At the...

CVE-2026-48815: Improper Verification of Cryptographic Signature

sigstore-js provides JavaScript libraries for interacting with Sigstore services. Prior to 4.1.1, the documented certificateOIDs option in sigstore.verify is accepted by the public API but discarded before verification, so required certificate extension OIDs are never checked and applications...

CVE-2026-50681: Exposure of Sensitive Information to an Unauthorized Actor

Exposure of sensitive information to an unauthorized actor in Windows Cryptographic Services allows an authorized attacker to disclose information locally...

PT-2026-58256

Name of the Vulnerable Software and Affected Versions Windows CryptoAPI affected versions not specified Description A missing cryptographic step in the Windows CryptoAPI allows an authorized attacker to perform local tampering, which can affect the system. Recommendations At the moment, there is ...

PT-2026-58673

Missing cryptographic step in Windows Boot Loader allows an authorized attacker to bypass a security feature locally...

PT-2026-58698

Name of the Vulnerable Software and Affected Versions .NET versions prior to 8.0.29 .NET versions prior to 9.0.18 .NET versions prior to 10.0.10 Description Improper verification of cryptographic signatures allows an unauthenticated attacker to remotely bypass security protections over a network...

CVE-2026-47304: Improper Verification of Cryptographic Signature

Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network...