VeraCrypt vulnerabilities | LiveThreat CVE Feed

Product

VeraCrypt

by veracrypt · last CVE Oct 14, 2026

CVEs

On KEV

6.2

Max CVSS

New 30D

Severity mix

Critical 0High 0Medium 2Low 1

Severity

Exploitation

Watch

Add VeraCrypt to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-53762	6.2	0%	Aug 21	VeraCryp: wolfCrypt backend bypasses VeraCrypt PBKDF2 iteration count (non-default WOLFCRYPT=1 builds) Affected: < 1.26.29
CVE-2026-54073	4.6	0%	Aug 21	VeraCrypt: Hidden volume quick format weakens plausible deniability Affected: >= 1.26.6, < 1.26.29
CVE-2026-77572	3.3	0%	Oct 14	VeraCrypt: Missing authorization on veracrypt.sys IOCTLs exposes disk topology, symlink targets, and DeviceObject reference count to any client of \\.\VeraCrypt Affected: <= 1.26.29