PR
Vendor
Privasys
7
CVEs
0
On KEV
7
New 30D
Products
RA9.1
ra-tls-clients
Privasys
3 CVEs0 on KEV3 new
EN9.1
enclave-os-mini
Privasys
1 CVEs0 on KEV1 new
EN9.1
enclave-os-virtual
Privasys
1 CVEs0 on KEV1 new
GO9.1
go
Privasys
1 CVEs0 on KEV1 new
RU9.1
rustls
Privasys
1 CVEs0 on KEV1 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-108361 | RA ra-tls-clients Privasys | 7.2 | Oct 12 | Privasys Intra-handshake attested TLS implementation is vulnerable to TOCTOU Attacks |
| CVE-2026-108362 | RA ra-tls-clients Privasys | 9.1 | Oct 12 | Privasys attested TLS accepted evidence from any unrevoked TEE platform (diversion attack) |
| CVE-2026-108269 | RA ra-tls-clients Privasys | 9.1 | Oct 9 | ra-tls-clients: RA-TLS challenge verifier accepted quotes not bound to the TLS session |
| CVE-2026-108268 | EN enclave-os-virtual Privasys | 9.1 | Oct 9 | enclave-os-virtual: RA-TLS challenge certificates were not bound to the TLS session |
| CVE-2026-108267 | GO go Privasys | 9.1 | Oct 9 | Privasys Go fork: RA-TLS challenge mode did not bind attestation evidence to the TLS session |
| CVE-2026-108266 | RU rustls Privasys | 9.1 | Oct 9 | Privasys rustls fork: RA-TLS challenge mode did not bind attestation evidence to the TLS session |
| CVE-2026-108265 | EN enclave-os-mini Privasys | 9.1 | Oct 9 | enclave-os-mini: RA-TLS challenge certificates were not bound to the TLS session |