CVE-2026-66799

Heap-based buffer overflow in Windows Key Guard allows an authorized attacker to elevate privileges locally...

CVE-2026-58650

Authorization bypass through user-controlled key in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...

CVE-2026-58650

Authorization bypass through user-controlled key in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...

CVE-2026-43606

Observable Timing Discrepancy in the AMD Vitis Libraries ECDSA secp256k1 component could allow attackers with local access to potentially perform timing analysis or electromagnetic emanation attacks, resulting in high confidentiality and integrity impact due to the exposure of private cryptograph...

CVE-2026-34635

is affected by a Use of Hard-coded Cryptographic Key vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and write access. Exploitation of this issue does not require user...

CVE-2026-66799 Windows Key Guard Elevation of Privilege Vulnerability

...

CVE-2026-66799

CVE-2026-66799 describes a heap-based buffer overflow in Windows Key Guard that allows an authenticated, local attacker to elevate privileges. Affected component: Windows Key Guard. Root cause: heap-based buffer overflow (as stated). Impact: local privilege escalation with high confidentiality, i...

EUVD-2026-56450

Heap-based buffer overflow in Windows Key Guard allows an authorized attacker to elevate privileges locally...

CVE-2026-66799 Windows Key Guard Elevation of Privilege Vulnerability

...

CVE-2026-58650

Authorization bypass through user-controlled key in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...

EUVD-2026-56289

Authorization bypass through user-controlled key in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...

EUVD-2026-56555

Observable Timing Discrepancy in the AMD Vitis Libraries ECDSA secp256k1 component could allow attackers with local access to potentially perform timing analysis or electromagnetic emanation attacks, resulting in high confidentiality and integrity impact due to the exposure of private cryptograph...

CVE-2026-43606

CVE-2026-43606 concerns the AMD Vitis Libraries ECDSA secp256k1 component. The vulnerability is described as an observable timing discrepancy that an attacker with local access could use to perform timing analysis or electromagnetic emanation attacks, with high confidentiality and integrity impac...

CVE-2026-43606

Observable Timing Discrepancy in the AMD Vitis Libraries ECDSA secp256k1 component could allow attackers with local access to potentially perform timing analysis or electromagnetic emanation attacks, resulting in high confidentiality and integrity impact due to the exposure of private cryptograph...

bouncycastle: BC-JAVA: private key leakage via non-constant time comparisons

A flaw was found in Legion of the Bouncy Castle Inc. BC-JAVA core. A covert timing channel vulnerability, caused by non-constant time comparisons, risks the leakage of private keys in the FrodoKEM implementation. An unauthenticated, remote attacker can potentially exploit this timing discrepancy ...

CVE-2026-34635

is affected by a Use of Hard-coded Cryptographic Key vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and write access. Exploitation of this issue does not require user...

EUVD-2026-56541

is affected by a Use of Hard-coded Cryptographic Key vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and write access. Exploitation of this issue does not require user...

CVE-2026-34635

Technical details about CVE-2026-34635 are not publicly available in the provided documents. Monitor for updates; the sources here do not disclose affected product/version, root cause specifics, or remediation guidance.

CVE-2026-34635 ColdFusion | Use of Hard-coded Cryptographic Key (CWE-321)

is affected by a Use of Hard-coded Cryptographic Key vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and write access. Exploitation of this issue does not require user...

CVE-2026-34635 ColdFusion | Use of Hard-coded Cryptographic Key (CWE-321)

is affected by a Use of Hard-coded Cryptographic Key vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and write access. Exploitation of this issue does not require user...