YU
Vendor
Yubico
56
CVEs
0
On KEV
0
New 30D
Products
YU7.5
Yubihsm-shell
Yubico
4 CVEs0 on KEV0 new
PA8.1
Pam-u2f
Yubico
3 CVEs0 on KEV0 new
Y55.9
Yubikey 5 Nfc Firmware
Yubico
3 CVEs0 on KEV0 new
LI7.5
Libu2f-host
Yubico
2 CVEs0 on KEV0 new
LI4.6
Libykpiv
Yubico
2 CVEs0 on KEV0 new
PM6.8
Piv Manager
Yubico
2 CVEs0 on KEV0 new
PT6.8
Piv Tool
Yubico
2 CVEs0 on KEV0 new
PT4.6
Piv Tool Manager
Yubico
2 CVEs0 on KEV0 new
SC6.8
Smart Card Minidriver
Yubico
2 CVEs0 on KEV0 new
YO8.6
Yubikey One Time Password Validation Server
Yubico
2 CVEs0 on KEV0 new
YS4.6
Yubikey Smart Card Minidriver
Yubico
2 CVEs0 on KEV0 new
LI2.9
libfido2
Yubico
1 CVEs0 on KEV0 new
OT6.5
Otp
Yubico
1 CVEs0 on KEV0 new
PM9.8
Pam Module
Yubico
1 CVEs0 on KEV0 new
PY2.9
python-fido2
Yubico
1 CVEs0 on KEV0 new
SK4.2
Security Key C Nfc BY Yubico Firmware
Yubico
1 CVEs0 on KEV0 new
SK4.2
Security Key Nfc BY Yubico Firmware
Yubico
1 CVEs0 on KEV0 new
WE7.5
webauthn-server-core
Yubico
1 CVEs0 on KEV0 new
YK8.8
Ykneo-openpgp
Yubico
1 CVEs0 on KEV0 new
YP8.2
Yubico Pam
Yubico
1 CVEs0 on KEV0 new
Y24.2
Yubihsm 2 Fips Firmware
Yubico
1 CVEs0 on KEV0 new
Y24.2
Yubihsm 2 Firmware
Yubico
1 CVEs0 on KEV0 new
Y27.5
Yubihsm 2 Sdk
Yubico
1 CVEs0 on KEV0 new
Y27.5
Yubihsm 2 Software Development Kit
Yubico
1 CVEs0 on KEV0 new
YC7.5
Yubihsm Connector
Yubico
1 CVEs0 on KEV0 new
YU2.2
YubiKey
Yubico
1 CVEs0 on KEV0 new
Y54.2
Yubikey 5 Nano Fips Firmware
Yubico
1 CVEs0 on KEV0 new
Y54.2
Yubikey 5 Nano Firmware
Yubico
1 CVEs0 on KEV0 new
Y54.2
Yubikey 5 Nfc Fips Firmware
Yubico
1 CVEs0 on KEV0 new
Y54.2
Yubikey 5c Fips Firmware
Yubico
1 CVEs0 on KEV0 new
Y54.2
Yubikey 5c Firmware
Yubico
1 CVEs0 on KEV0 new
Y54.2
Yubikey 5c Nano Fips Firmware
Yubico
1 CVEs0 on KEV0 new
Y54.2
Yubikey 5c Nano Firmware
Yubico
1 CVEs0 on KEV0 new
Y54.2
Yubikey 5c Nfc Fips Firmware
Yubico
1 CVEs0 on KEV0 new
Y54.2
Yubikey 5c Nfc Firmware
Yubico
1 CVEs0 on KEV0 new
Y54.2
Yubikey 5ci Fips Firmware
Yubico
1 CVEs0 on KEV0 new
Y54.2
Yubikey 5ci Firmware
Yubico
1 CVEs0 on KEV0 new
YB4.2
Yubikey Bio Firmware
Yubico
1 CVEs0 on KEV0 new
YC4.2
Yubikey C Bio Firmware
Yubico
1 CVEs0 on KEV0 new
YU2.9
yubikey-manager
Yubico
1 CVEs0 on KEV0 new
YN4.2
Yubikey Neo
Yubico
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-46419 | WE webauthn-server-core Yubico | 7.5 | May 14 | Yubico webauthn-server-core (aka java-webauthn-server) 2.8.0 before 2.8.2 incorrectly checks a function's return value in the second factor flow, leading to impersonation |
| CVE-2026-40947 | LI libfido2 Yubico | 2.9 | Apr 15 | Yubico libfido2 before 1.17.0, python-fido2 before 2.2.0, and yubikey-manager before 5.9.1 have an unintended DLL search path |
| CVE-2025-29991 | YU YubiKey Yubico | 2.2 | Apr 3 | Yubico YubiKey 5.4.1 through 5.7.3 before 5.7.4 has an incorrect FIDO CTAP PIN/UV Auth Protocol Two implementation |
| CVE-2024-45678 | Y5 Yubikey 5 Nano Firmware Yubico | 4.2 | Sep 3 | Yubico YubiKey 5 Series devices with firmware before 5.7.0 and YubiHSM 2 devices with firmware before 2.4.0 allow an ECDSA secret-key extraction attack (that requires physical… |
| CVE-2023-39908 | Y2 Yubihsm 2 Sdk Yubico | 7.5 | Aug 14 | The PKCS11 module of the YubiHSM 2 SDK through 2023.01 does not properly validate the length of specific read operations on object metadata |
| CVE-2022-24584 | OT Otp Yubico | 6.5 | May 11 | Incorrect access control in Yubico OTP functionality of the YubiKey hardware tokens along with the Yubico OTP validation server |
| CVE-2015-3298 | YK Ykneo-openpgp Yubico | 8.8 | Mar 30 | Yubico ykneo-openpgp before 1.0.10 has a typo in which an invalid PIN can be used |
| CVE-2021-43399 | Y2 Yubihsm 2 Software Development Kit Yubico | 7.5 | Dec 8 | The Yubico YubiHSM YubiHSM2 library 2021.08, included in the yubihsm-shell project, does not properly validate the length of some operations including SSH signing requests, and… |
| CVE-2021-31924 | PA Pam-u2f Yubico | 6.8 | May 26 | Yubico pam-u2f before 1.1.1 has a logic issue that, depending on the pam-u2f configuration and the application used, could lead to a local PIN bypass |
| CVE-2021-32489 | YU Yubihsm-shell Yubico | 4.4 | May 10 | An issue was discovered in the _send_secure_msg() function of Yubico yubihsm-shell through 2.0.3 |
| CVE-2021-28484 | YC Yubihsm Connector Yubico | 7.5 | Apr 14 | An issue was discovered in the /api/connector endpoint handler in Yubico yubihsm-connector before 3.0.1 (in YubiHSM SDK before 2021.04) |
| CVE-2021-27217 | YU Yubihsm-shell Yubico | 4.4 | Mar 4 | An issue was discovered in the _send_secure_msg() function of Yubico yubihsm-shell through 2.0.3 |
| CVE-2021-3011 | YN Yubikey Neo Yubico | 4.2 | Jan 7 | An electromagnetic-wave side-channel issue was discovered on NXP SmartMX / P5x security microcontrollers and A7x secure authentication microcontrollers, with CryptoLib through… |
| CVE-2020-24388 | YU Yubihsm-shell Yubico | 7.5 | Oct 19 | An issue was discovered in the _send_secure_msg() function of yubihsm-shell through 2.0.2 |
| CVE-2020-24387 | YU Yubihsm-shell Yubico | 7.5 | Oct 19 | An issue was discovered in the yh_create_session() function of yubihsm-shell through 2.0.2 |
| CVE-2020-15001 | Y5 Yubikey 5 Nfc Firmware Yubico | 5.3 | Jul 9 | An information leak was discovered on Yubico YubiKey 5 NFC devices 5.0.0 to 5.2.6 and 5.3.0 to 5.3.1 |
| CVE-2020-15000 | Y5 Yubikey 5 Nfc Firmware Yubico | 5.9 | Jul 9 | A PIN management problem was discovered on Yubico YubiKey 5 devices 5.2.0 to 5.2.6 |
| CVE-2020-13132 | LI Libykpiv Yubico | 4.6 | Jul 9 | An issue was discovered in Yubico libykpiv before 2.1.0 |
| CVE-2020-13131 | LI Libykpiv Yubico | 4.3 | Jul 9 | An issue was discovered in Yubico libykpiv before 2.1.0 |
| CVE-2020-10185 | YO Yubikey One Time Password Validation Server Yubico | 8.6 | Mar 5 | The sync endpoint in YubiKey Validation Server before 2.40 allows remote attackers to replay an OTP |
| CVE-2020-10184 | YO Yubikey One Time Password Validation Server Yubico | 7.5 | Mar 5 | The verify endpoint in YubiKey Validation Server before 2.40 does not check the length of SQL queries, which allows remote attackers to cause a denial of service, aka SQL… |
| CVE-2011-4120 | PM Pam Module Yubico | 9.8 | Nov 26 | Yubico PAM Module before 2.10 performed user authentication when 'use_first_pass' PAM configuration option was not used and the module was configured as 'sufficient' in the PAM… |
| CVE-2019-12210 | PA Pam-u2f Yubico | 8.1 | Jun 4 | In Yubico pam-u2f 1.0.7, when configured with debug and a custom debug log file is set using debug_file, that file descriptor is not closed when a new process is spawned |
| CVE-2019-12209 | PA Pam-u2f Yubico | 7.5 | Jun 4 | Yubico pam-u2f 1.0.7 attempts parsing of the configured authfile (default $HOME/.config/Yubico/u2f_keys) as root (unless openasuser was enabled), and does not properly verify that… |
| CVE-2018-20340 | LI Libu2f-host Yubico | 6.8 | Mar 17 | Yubico libu2f-host 1.1.6 contains unchecked buffers in devs.c, which could enable a malicious token to exploit a buffer overflow |
| CVE-2019-9578 | LI Libu2f-host Yubico | 7.5 | Mar 5 | In devs.c in Yubico libu2f-host before 1.1.8, the response to init is misparsed, leaking uninitialized stack memory back to the device |
| CVE-2018-14779 | PM Piv Manager Yubico | 6.8 | Aug 15 | A buffer overflow issue was discovered in the Yubico-Piv 1.5.0 smartcard driver |
| CVE-2018-14780 | PM Piv Manager Yubico | 4.6 | Aug 15 | An out-of-bounds read issue was discovered in the Yubico-Piv 1.5.0 smartcard driver |
| CVE-2018-9275 | YP Yubico Pam Yubico | 8.2 | Apr 4 | In check_user_token in util.c in the Yubico PAM module (aka pam_yubico) 2.18 through 2.25, successful logins can leak file descriptors to the auth mapping file, which can lead to… |