CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.08.27)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
In Bouncy Castle for Java before 1.85, the PKCS#12 MAC and bag-decryption KDF iteration-count bound can lead to DoS. This issue also affects LTS before 2.73.12 and BC-FJA before specific versions.
In Bouncy Castle for Java before 1.85, a Lazy ASN.1 sequence forces resetting the nesting-depth guard. This issue also affects LTS and FIPS versions.
In Bouncy Castle for Java before 1.85, the MLS wire decoder allocates attacker-declared opaque length before bounds check.
In Bouncy Castle for Java before 1.85, OpenPGP AEAD decryption skips the final tag on chunk-aligned data. This issue also affects LTS and FIPS versions.
In Bouncy Castle for Java before 1.85, the IESEngine in stream mode allows MAC forgery via length-dependent KDF split. This issue also affects LTS before 2.73.12.
In Bouncy Castle for Java before 1.85, the KCCMBlockCipher MAC does not bind the nonce when AAD is absent, allowing cross-nonce AEAD forgery. This also affects Bouncy Castle for Java LTS before 2.73.12.
In Bouncy Castle for Java before 1.85, CMS AuthEnvelopedData fails to enforce tag-length on decryption. This also affects Bouncy Castle for Java LTS before 2.73.12 and BC-FJA before specified versions.
In Bouncy Castle for Java before 1.85, CCM-family modes write plaintext to the caller buffer before tag check. This also affects Bouncy Castle for Java LTS before 2.73.12 and BC-FJA before specified versions.
In Bouncy Castle for Java before 1.85, the HSS public-key level count is unbounded, enabling huge memory allocation on verify. This also affects Bouncy Castle for Java LTS before 2.73.12 and BC-FJA before specified versions.
In Bouncy Castle for Java before 1.85, stringifying X.500 distinguished names has quadratic time complexity, causing excessive processing time. This also affects Bouncy Castle for Java LTS before 2.73.12 and BC-FJA before specified versions.
In the Bluetooth driver, a missing permission check allows permission bypass. A local attacker with User privileges can escalate privileges without user interaction.
In the Telephony component, a missing permission check could allow local escalation of privilege without additional execution privileges and without user interaction.
In Modem, a missing bounds check could lead to an out-of-bounds read, allowing remote denial of service if the UE connects to a rogue base station controlled by the attacker. No additional privileges or user interaction are needed.
In the WLAN AP driver, there is a possible out-of-bounds write due to a missing bounds check. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not required for exploitation.
BaserCMS contains a CSV file injection vulnerability. If a user downloads and opens a CSV file containing malicious code injected by an attacker, the malicious code may be executed.
In Bouncy Castle for Java before 1.85, the BKS keystore accepts a legacy version with a 16-bit integrity MAC key. This also affects Bouncy Castle for Java LTS before 2.73.12.
In Bouncy Castle for Java before 1.85, the OpenPGP user-attribute subpacket length is bounded only by JVM max memory. This also affects Bouncy Castle for Java LTS before 2.73.12 and BC-FJA before specified versions.
In Bouncy Castle for Java before 1.85, the DTLS handshake reassembler allocates a buffer from an unchecked 24-bit length. This also affects Bouncy Castle for Java LTS before 2.73.12 and BC-FJA before specified versions.
In Bouncy Castle for Java before 1.85, the OER parser recurses without depth limit on self-referential IEEE 1609.2 schema. This also affects Bouncy Castle for Java LTS before 2.73.12 and BC-FJA before specified versions.
In Bouncy Castle for Java before 1.85, the MLS hash-ratchet honors an arbitrary 32-bit generation counter from the sender.