14682 matches found
PT-2026-41300
Name of the Vulnerable Software and Affected Versions SixG301xxx affected versions not specified Description Countermeasures for Differential Power Analysis DPA—a side-channel attack that analyzes power consumption to extract secret keys—within the SYMCRYPTO engine on SixG301xxx devices are not...
Vulnerability of Cryptographic Services in Windows operating systems, allowing attackers to enhance their privileges
The vulnerability of Cryptographic Services in Windows operating systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges...
CLSA-2026-1778787445 Fix CVE(s): CVE-2026-28387, CVE-2026-28388, CVE-2026-28389
SECURITY UPDATE: Use-after-free / heap corruption in danematch of the X.509 verifier where the cached DANE-matched certificate was freed via OPENSSLfree instead of X509free, bypassing the X509 reference counting and freeing certificate fields that may still be referenced by other holders. An...
UBUNTU-CVE-2026-44662
rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.10.0 to before 0.10.79, CipherCtxRef::cipherupdate, CipherCtxRef::cipherupdatevec, and symm::Crypter::update incorrectly sized output buffers when used with AES key-wrap-with-padding ciphers EVPaes128,192,256wrappad...
The vulnerability of the microprogrammed software of the PLANET IGS-5225-8P2T4S industrial-controlled switches, related to the use of cryptographic algorithms containing defects, allows a hacker to obtain the device’s configuration file and restore the password to access the privileged mode.
The vulnerability of the microprogrammed software of the PLANET IGS-5225-8P2T4S industrial-controlled switches is related to the use of cryptographic algorithms that contain vulnerabilities. Exploiting this vulnerability can allow an attacker to obtain the device’s configuration file and recover...
CVE-2026-40377
Heap-based buffer overflow in Windows Cryptographic Services allows an authorized attacker to elevate privileges locally...
CVE-2026-43330
A flaw was found in the Linux kernel's caam cryptographic accelerator driver. When processing a Hash-based Message Authentication Code HMAC key that exceeds the block size, the driver incorrectly handles memory allocation and copying. This can lead to an overflow, where the system attempts to rea...
CVE-2020-37168
The CVE-2020-37168 entry concerns Ecommerce Systempay 1.0, where a weak cryptographic implementation exposes a 16-character production secret key used for payment signature generation. Attackers can extract payment form data and signatures from POST requests to the payment endpoint and perform a ...
Backdoor Channels Hidden in Latent Space: Cryptographic Undetectability in Modern Neural Networks
Recent cryptographic results establish that neural networks can be backdoored such that no efficient algorithm can distinguish them from a clean model. These guarantees, however, have been confined to stylised architectures of limited practical relevance, leaving open whether comparable...
CVE-2026-25107: Use of Hard-coded Cryptographic Key
ELECOM wireless LAN access point devices use a hard-coded cryptographic key when creating backups of configuration files. An attacker who knows the encryption key can tamper the configuration file of the product, and a victim administrator may be tricked to use a crafted configuration file...
EUVD-2026-29730
A use of hard-coded cryptographic key vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.2, FortiClientWindows 7.2 all versions may allow attacker to information disclosure via...
EUVD-2026-29654
Heap-based buffer overflow in Windows Cryptographic Services allows an authorized attacker to elevate privileges locally...
CVE-2026-40377
Heap-based buffer overflow in Windows Cryptographic Services allows an authorized attacker to elevate privileges locally...
CVE-2026-40377 Microsoft Cryptographic Services Elevation of Privilege Vulnerability
...
CVE-2026-40377
Heap-based buffer overflow in Windows Cryptographic Services allows an authorized attacker to elevate privileges locally...
CVE-2026-40377
Technical details (affected components, root cause, impact specifics, or fixes) are not publicly provided in the connected documents. Monitor vendor advisories for patch information and affected products; no additional specifics are available here.
CVE-2026-40377 Microsoft Cryptographic Services Elevation of Privilege Vulnerability
...
CVE-2026-33117
The Java Key Vault Keys library in the Azure SDK for Java contains an issue in the local cryptographic verification path where authentication tag comparison was implemented incorrectly. In affected applications that use the vulnerable local cryptography path, specially crafted encrypted input may...
