CVE-2026-6450

CVE-2026-6450 – CRL critical extension bypass : The vulnerability lies in ParseCRL_Extensions where enforcement of critical CRL extensions is insufficient, allowing a crafted CRL with an unhandled critical extension to be accepted. This affects builds with CRL support enabled when the parsed CRL ...

X.509: Fix out-of-bounds access when parsing extensions

...

EUVD-2026-23819

In the Linux kernel, the following vulnerability has been resolved: X.509: Fix out-of-bounds access when parsing extensions Leo reports an out-of-bounds access when parsing a certificate with empty Basic Constraints or Key Usage extension because the first byte of the extension is read before...

Apple Safari Extension Replacement Vulnerability

Apple Safari is a WEB browser. A security vulnerability exists in Apple Safari that allows remote attackers to exploit a vulnerability to trick users into parsing, replaceable extensions...