CVE-2026-5501 Improper Certificate Signature Verification in X.509 Chain Validation Allows Forged Leaf Certificates

wolfSSLX509verifycert in the OpenSSL compatibility layer accepts a certificate chain in which the leaf's signature is not checked, if the attacker supplies an untrusted intermediate with Basic Constraints CA:FALSE that is legitimately signed by a trusted root. An attacker who obtains any leaf...

Mozilla Thunderbird < 6.0.2 Untrusted CA

The installed version of Thunderbird is earlier than 6.0.2. Due to a recent attack against certificate authority DigiNotar, Mozilla has added explicit distrust to the DigiNotar root certificate and several intermediates in this version of Thunderbird. Note this is a further fix to MFSA 2011-34,...

Firefox 3.6.x < 3.6.22 Untrusted CA

The installed version of Firefox 3.6.x is earlier than 3.6.22. Due to a recent attack against certificate authority DigiNotar, Mozilla has added explicit distrust to the DigiNotar root certificate and several intermediates in this version of Firefox. Note this is a further fix to MFSA 2011-34,...

Google Chrome < 13.0.782.220 Untrusted CA

The version of Google Chrome installed on the remote host is earlier than 13.0.782.220. Due to a recent attack against certificate authority DigiNotar, Google has added explicit distrust to the DigiNotar root certificate and several intermediates in this version of Google Chrome. Note this is a...

CVE-2005-3170: Improper Certificate Validation

The LDAP client on Microsoft Windows 2000 before Update Rollup 1 for SP4 accepts certificates using LDAP Secure Sockets Layer LDAPS even when the Certificate Authority CA is not trusted, which could allow attackers to trick users into believing that they are accessing a trusted site...