Log inCVE-2026-32208 Microsoft Entra ID Spoofing Vulnerability
1 Juli 2026 om 16:00
Corrected the CVE description and title. This is an informational change only.
Normale weergave
Ontvangen — 1 Juli 2026
⏭
Microsoft Security
CVE-2026-41992 Global Buffer Overflow in GNU gzip
1 Juli 2026 om 10:40
Information published.
-
Microsoft Security
- CVE-2026-57062 CMS (Cryptographic Message Syntax) parsing in gpgsm in GnuPG through 2.5.20 mishandles the CMS format for AES-GCM because aes-ICVlen is supposed to be 12 bytes but 4 bytes is accepted. NOTE: this is related to CVE-2026-34182.
-
- CVE-2026-13595 Util-linux: util-linux: heap use-after-free in libblkid nested partition probing
CVE-2026-13595 Util-linux: util-linux: heap use-after-free in libblkid nested partition probing
1 Juli 2026 om 10:06
Information published.
-
- CVE-2026-11625 Bytes::Random::Secure versions through 0.29 for Perl share internal state across forked processes
CVE-2026-11625 Bytes::Random::Secure versions through 0.29 for Perl share internal state across forked processes
1 Juli 2026 om 10:06
Information published.
-
- CVE-2026-58050 libssh2 - Integer Overflow in publickey Subsystem Attribute Allocation
CVE-2026-58050 libssh2 - Integer Overflow in publickey Subsystem Attribute Allocation
1 Juli 2026 om 10:06
Information published.
CVE-2026-58051 libssh2 - Free of Uninitialized Pointer in publickey List Cleanup
1 Juli 2026 om 10:06
Information published.
CVE-2026-7531 Use-after-free in PQC hybrid key-share handling
1 Juli 2026 om 10:06
Information published.
-
- CVE-2026-6412 Continued acceptance of SHA-1/MD5 digests in certificate processing
CVE-2026-6412 Continued acceptance of SHA-1/MD5 digests in certificate processing
1 Juli 2026 om 10:06
Information published.
-
- CVE-2026-6092 Encrypt-then-MAC could fall back to MAC-then-Encrypt when HAVE_ENCRYPT_THEN_MAC is configured
CVE-2026-6092 Encrypt-then-MAC could fall back to MAC-then-Encrypt when HAVE_ENCRYPT_THEN_MAC is configured
1 Juli 2026 om 10:06
Information published.
-
- CVE-2026-11310 X.509 trust-chain bypass in wolfSSL_X509_verify_cert() via untrusted intermediate anchoring
CVE-2026-11310 X.509 trust-chain bypass in wolfSSL_X509_verify_cert() via untrusted intermediate anchoring
1 Juli 2026 om 10:06
Information published.
-
- CVE-2026-10097 ML-KEM-1024 x64 AVX2 incomplete cipher text comparison enables IND-CCA2 break and static private-key recovery
CVE-2026-10097 ML-KEM-1024 x64 AVX2 incomplete cipher text comparison enables IND-CCA2 break and static private-key recovery
1 Juli 2026 om 10:06
Information published.
-
- CVE-2026-10098 OCSP CertID serial-number length-confusion in wolfSSL_OCSP_resp_find_status
CVE-2026-10098 OCSP CertID serial-number length-confusion in wolfSSL_OCSP_resp_find_status
1 Juli 2026 om 10:06
Information published.
-
- CVE-2026-8720 HMAC-BLAKE2 final discards message when key length exceeds block size
CVE-2026-8720 HMAC-BLAKE2 final discards message when key length exceeds block size
1 Juli 2026 om 10:05
Information published.
-
- CVE-2026-12340 Out-of-bounds heap read in SM2/SM3 certificate Subject Key Identifier computation
CVE-2026-12340 Out-of-bounds heap read in SM2/SM3 certificate Subject Key Identifier computation
1 Juli 2026 om 10:05
Information published.
-
- CVE-2026-10512 X25519 x86_64 assembly final reduction leaves non-canonical field element
CVE-2026-10512 X25519 x86_64 assembly final reduction leaves non-canonical field element
1 Juli 2026 om 10:05
Information published.
CVE-2026-10592 Wildcard DNS SAN bypasses CA name-constraint checks
1 Juli 2026 om 10:05
Information published.
-
- CVE-2026-6091 Partial-chain verification accepts untrusted intermediate as trust anchor
CVE-2026-6091 Partial-chain verification accepts untrusted intermediate as trust anchor
1 Juli 2026 om 10:05
Information published.
-
- CVE-2026-6325 Out-of-bounds write in SetSuitesHashSigAlgo on oversized signature algorithms list
CVE-2026-6325 Out-of-bounds write in SetSuitesHashSigAlgo on oversized signature algorithms list
1 Juli 2026 om 10:05
Information published.
-
- CVE-2026-55958 Renesas TSIP TLS 1.3 transcript buffer out-of-bounds write in tsip_StoreMessage
CVE-2026-55958 Renesas TSIP TLS 1.3 transcript buffer out-of-bounds write in tsip_StoreMessage
1 Juli 2026 om 10:05
Information published.
CVE-2026-6731 X.509 name constraint bypass via Subject CN treated as a DNS name
1 Juli 2026 om 10:05
Information published.
-
- CVE-2026-7511 PKCS7_verify signer confusion allows forged signatures to be accepted
CVE-2026-7511 PKCS7_verify signer confusion allows forged signatures to be accepted
1 Juli 2026 om 10:05
Information published.
-
- CVE-2026-6330 ML-KEM ARM64 NEON ciphertext comparison only compares half of the input
CVE-2026-6330 ML-KEM ARM64 NEON ciphertext comparison only compares half of the input
1 Juli 2026 om 10:04
Information published.
CVE-2026-6331 HMAC zero-length tag forgery in EVP_DigestVerifyFinal
1 Juli 2026 om 10:04
Information published.
-
- CVE-2026-6094 Heap buffer overread in wc_PKCS7_DecodeEnvelopedData parsing crafted PKCS7 EnvelopedData
CVE-2026-6094 Heap buffer overread in wc_PKCS7_DecodeEnvelopedData parsing crafted PKCS7 EnvelopedData
1 Juli 2026 om 10:04
Information published.
-
- CVE-2026-6678 Integer underflow in wc_PKCS7_DecryptOri handling crafted Other Recipient Info
CVE-2026-6678 Integer underflow in wc_PKCS7_DecryptOri handling crafted Other Recipient Info
1 Juli 2026 om 10:04
Information published.
-
- CVE-2026-55961 wolfSSL_PKCS7_verify() reports success for degenerate (certs-only) PKCS#7 with no signer
CVE-2026-55961 wolfSSL_PKCS7_verify() reports success for degenerate (certs-only) PKCS#7 with no signer
1 Juli 2026 om 10:04
Information published.
-
- CVE-2026-6329 PKCS#12 MAC verification uses attacker-controlled comparison length
CVE-2026-6329 PKCS#12 MAC verification uses attacker-controlled comparison length
1 Juli 2026 om 10:04
Information published.
-
- CVE-2026-11999 X.509 trust-chain bypass via path-depth exhaustion in wolfSSL_X509_verify_cert()
CVE-2026-11999 X.509 trust-chain bypass via path-depth exhaustion in wolfSSL_X509_verify_cert()
1 Juli 2026 om 10:04
Information published.
-
- CVE-2026-55962 TLS 1.3 post-handshake authentication: server accepts Finished without client Certificate/CertificateVerify
CVE-2026-55962 TLS 1.3 post-handshake authentication: server accepts Finished without client Certificate/CertificateVerify
1 Juli 2026 om 10:04
Information published.
