Windows Cryptographic Services vulnerabilities
9 known CVE vulnerabilities in Windows Cryptographic Services, translated and rated.
- CVE-2026-40377High
Heap-based buffer overflow in Windows Cryptographic Services allows an authorized attacker to elevate privileges locally.
- CVE-2026-50681Medium
Exposure of sensitive information to an unauthorized actor in Windows Cryptographic Services allows an authorized attacker to disclose information locally.
- CVE-2026-50352Medium
Exposure of sensitive information to an unauthorized actor in Windows Cryptographic Services allows an authorized attacker to disclose information locally.
- CVE-2026-50302Medium
Improper certificate validation in Windows Cryptographic Services allows an unauthorized attacker to bypass a security feature over a network.
- CVE-2026-44806Medium
Missing release of memory after effective lifetime in Windows Cryptographic Services allows an unauthorized attacker to deny service over a network.
- CVE-2026-44810High
Improper authentication in Windows Cryptographic Services allows an unauthorized attacker to elevate privileges locally.
- CVE-2024-30096Medium
A vulnerability in Windows Cryptographic Services allows information disclosure. An attacker could exploit this flaw to read sensitive data stored in system memory.
- CVE-2023-36907Medium
A vulnerability in Windows Cryptographic Services may lead to information disclosure. An attacker could exploit this flaw to gain access to sensitive data.
- CVE-2023-36906Medium
A vulnerability in Windows Cryptographic Services allows for information disclosure. An attacker could exploit this flaw to gain access to sensitive data.

