232 matches found
CVE-2026-62779
Use after free in Windows Schannel allows an authorized attacker to elevate privileges locally...
CVE-2026-62757
Improper verification of cryptographic signature in Windows Schannel allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-62757 Windows Schannel Security Feature Bypass Vulnerability
...
CVE-2026-62757
Summary: CVE-2026-62757 involves Windows Schannel with improper verification of cryptographic signatures, allowing a network-borne attacker to bypass a security feature. The impact is described as a security feature bypass over the network, with a medium base score (CVSS 3.1: 5.3) and high confid...
EUVD-2026-56649
Improper verification of cryptographic signature in Windows Schannel allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-62757 Windows Schannel Security Feature Bypass Vulnerability
...
CVE-2026-62779 Windows Schannel Elevation of Privilege Vulnerability
...
CVE-2026-62779
Windows Schannel contains a use-after-free vulnerability that enables an authenticated, local attacker to elevate privileges. Affected component is Schannel in Windows; root cause is a use-after-free defect leading to local privilege escalation. The public records do not specify patches or fixed ...
EUVD-2026-56383
Use after free in Windows Schannel allows an authorized attacker to elevate privileges locally...
CVE-2026-62779 Windows Schannel Elevation of Privilege Vulnerability
...
Windows Schannel Security Feature Bypass Vulnerability
Improper verification of cryptographic signature in Windows Schannel allows an unauthorized attacker to bypass a security feature over a network...
Windows Schannel Elevation of Privilege Vulnerability
Use after free in Windows Schannel allows an authorized attacker to elevate privileges locally...
PT-2026-70531
Name of the Vulnerable Software and Affected Versions Windows Schannel affected versions not specified Description A use-after-free condition in Windows Schannel allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs when an applicatio...
PT-2026-70516
Name of the Vulnerable Software and Affected Versions Windows Schannel affected versions not specified Description Improper verification of cryptographic signatures in Windows Schannel allows an unauthorized attacker to bypass a security feature over a network. Recommendations At the moment, ther...
CVE-2026-56186
Out-of-bounds read in Windows Schannel allows an authorized attacker to disclose information over a network...
PT-2026-58603
Name of the Vulnerable Software and Affected Versions Windows Schannel affected versions not specified Description An out-of-bounds read in Windows Schannel allows an authorized attacker to disclose sensitive information over a network. Recommendations At the moment, there is no information about...
curl: Schannel custom-CA path skips Extended Key Usage enforcement
Hi all, We believe the Schannel custom-CA verification path in lib/vtls/schannelverify.c may skip Extended Key Usage enforcement. In particular, a certificate that chains to the trusted custom CA but contains only id-kp-clientAuth, rather than id-kp-serverAuth, may pass peer verification on Windo...
Unity Linux 20.1060e / 20.1070e Security Update: curl (UTSA-2026-017507)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017507 advisory. curl 7.61.0 through 7.76.1 suffers from exposure of data element to wrong session due to a mistake in the code for CURLOPTSSLCIPHERLIST when libcurl is built to use...
curl: CURLOPT_PROXY_CRLFILE / CURLOPT_PROXY_ISSUERCERT / CURLOPT_PROXY_ISSUERCERT_BLOB silently ignored on backends that don't support them
From the Mythos report 2026-05-06 F1. CURLOPTPROXYCRLFILE / CURLOPTPROXYISSUERCERT / CURLOPTPROXYISSUERCERTBLOB silently ignored on backends that don't support them — severity Low https://github.com/curl/curl/blob/455bebc2c7/lib/setopt.cL1786-L1797...
curl: Heap-buffer-overflow in `Curl_ssl_push_certinfo_len()` — sole bounds check is `DEBUGASSERT`
Summary Curlsslpushcertinfolen in lib/vtls/vtls.c uses DEBUGASSERTcertnum numofcerts as its only bounds check before writing a heap pointer into ci-certinfocertnum. DEBUGASSERT is a no-op in every release/production build lib/curlsetup.h:1084. Any mismatch between the count passed to...