Inadvertently Disclosed Digital Certificates Could Allow Spoofing

Microsoft is publishing this advisory to notify customers of two inadvertently disclosed digital certificates that could be used to spoof content and to provide an update to the Certificate Trust List CTL to remove user-mode trust for the certificates. The disclosed root certificates were...

CVE-2018-17612

creationtimestamp| type| source ---|---|--- 2018-11-09 23:27:24+00:00| seen| https://t.me/canyoupwnme/4727 2018-11-28 21:23:43+00:00| seen| https://t.me/canyoupwnme/4807 2018-11-28 21:54:00+00:00| published-proof-of-concept| https://t.me/antichat/2818...

CVE-2018-17612

Summary of CVE-2018-17612 : Sennheiser HeadSetup (and HeadSetup Pro) improperly published the private signing key in the public distribution and installed CA/root certificates into the local Trusted Root CA store. The root cause is the inclusion of the private key in the SennComCCKey.pem file, en...