BC
Product
Bouncy Castle For Java Lts
28
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 3High 18Medium 7Low 0
Watch
Add Bouncy Castle For Java Lts to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-58062 | 9.1 | Aug 3 | Stapled OCSP response accepted without binding to the checked certificate Affected: through 2.73.11 |
| CVE-2026-59650 | 9.1 | Aug 3 | MTI/A0 DH agreement exponentiates unvalidated peer value Affected: through 2.73.11 |
| CVE-2026-8763 | 9.1 | Aug 3 | Name Constraints bypass via trailing dot in rfc822Name and URI Affected: through 2.73.11 |
| CVE-2026-12817 | 8.6 | Aug 3 | OpenPGP AEAD decryption skips final tag on chunk-aligned data Affected: through 2.73.11 |
| CVE-2026-12185 | 8.6 | Aug 3 | BKS/UBER keystore allocates from untrusted lengths before integrity check Affected: through 2.73.11 |
| CVE-2026-15055 | 8.2 | Aug 3 | PKCS#8 / PBES2 decryptors honour unbounded KDF cost from input Affected: through 2.73.11 |
| CVE-2026-13586 | 7.5 | Aug 3 | PKCS#12 MAC and bag-decryption KDF iteration-count bound (DoS) Affected: through 2.73.11 |
| CVE-2026-13506 | 7.5 | Aug 3 | Lazy ASN.1 sequence forcing resets nesting-depth guard Affected: through 2.73.11 |
| CVE-2026-12816 | 7.5 | Aug 3 | IESEngine stream-mode MAC forgery via length-dependent KDF split Affected: through 2.73.11 |
| CVE-2026-12803 | 7.5 | Aug 3 | KCCMBlockCipher MAC does not bind nonce when AAD is absent (cross-nonce AEAD forgery) Affected: through 2.73.11 |
| CVE-2026-12802 | 7.5 | Aug 3 | CMS AuthEnvelopedData fails to enforce tag-length on decryption Affected: through 2.73.11 |
| CVE-2026-14682 | 7.5 | Aug 3 | Possible OOM from unbounded up-front allocation on a definite-length read Affected: through 2.73.11 |
| CVE-2026-58059 | 7.5 | Aug 3 | Quadratic-time escaping when stringifying X.500 distinguished names Affected: through 2.73.11 |
| CVE-2026-58060 | 7.5 | Aug 3 | HSS public-key level count unbounded, enabling huge allocation on verify Affected: through 2.73.11 |
| CVE-2026-58061 | 7.5 | Aug 3 | CCM-family modes write plaintext to caller buffer before tag check Affected: through 2.73.11 |
| CVE-2026-59639 | 7.5 | Aug 3 | CMS verifySignatures returns true for SignedData with zero signers Affected: through 2.73.11 |
| CVE-2026-59642 | 7.5 | Aug 3 | CMS AuthenticatedData content not bound to MAC when authAttrs present Affected: through 2.73.11 |
| CVE-2026-59645 | 7.5 | Aug 3 | OER parser recurses without depth limit on self-referential IEEE 1609.2 schema Affected: through 2.73.11 |
| CVE-2026-59646 | 7.5 | Aug 3 | DTLS handshake reassembler allocates buffer from unchecked 24-bit length Affected: through 2.73.11 |
| CVE-2026-59649 | 7.5 | Aug 3 | OpenPGP user-attribute subpacket length bounded only by JVM max memory Affected: through 2.73.11 |
| CVE-2026-59651 | 7.5 | Aug 3 | BKS keystore accepts legacy version with 16-bit integrity MAC key Affected: through 2.73.11 |
| CVE-2026-59638 | 6.5 | Aug 3 | JSSE hostname verifier CN-fallback enabled by default despite documented opt-in Affected: through 2.73.11 |
| CVE-2026-12860 | 5.3 | Aug 3 | RSA PKCS#1 verification skips last two hash bytes in NULL-omitted path Affected: through 2.73.11 |
| CVE-2026-58063 | 5.3 | Aug 3 | BCFKS keystore load honours unbounded KDF cost from untrusted file Affected: through 2.73.11 |
| CVE-2026-59640 | 5.3 | Aug 3 | OpenPGP CFB quick-check oracle active on symmetric/session-key paths Affected: through 2.73.11 |
| CVE-2026-59641 | 5.3 | Aug 3 | S/MIME validator trusts signer-asserted signingTime for path validation Affected: through 2.73.11 |
| CVE-2026-59647 | 5.3 | Aug 3 | CRMF/CMP password-MAC honours unbounded iteration count Affected: through 2.73.11 |
| CVE-2026-59648 | 5.3 | Aug 3 | OpenPGP Argon2 S2K honours attacker-chosen memory and passes Affected: through 2.73.11 |
Showing 28