| CVE-2026-71888 |
In Bouncy Castle for Java before 1.86, the streaming CMS AuthenticatedData parser accepted a message whose…
|
8.7
High
|
Oct 3, 2026 |
| CVE-2026-71889 |
In Bouncy Castle for Java before 1.86, neither copy of PKIXCertPathReviewer -…
|
8.7
High
|
Oct 3, 2026 |
| CVE-2026-71892 |
In Bouncy Castle for Java before 1.86, the opt-in key-size validation on CMS key-transport recipients,…
|
6.9
Medium
|
Oct 3, 2026 |
| CVE-2026-85515 |
In Bouncy Castle for Java before 1.86, a truncated OpenPGP encrypted message was accepted with no error reported, and on…
|
8.2
High
|
Oct 3, 2026 |
| CVE-2026-17508 |
In Bouncy Castle for Java before 1.86, several password-based key derivation entry points ran the KDF with cost…
|
5.3
Medium
|
Oct 2, 2026 |
| CVE-2026-13505 |
In Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series) and 2.1.3 (2.1.X…
|
8.7
High
|
Aug 8, 2026 |
| CVE-2026-8798 |
In Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 2.1.3, the native entropy source used on Intel platforms…
|
8.7
High
|
Aug 8, 2026 |
| CVE-2026-13586 |
In Bouncy Castle for Java before 1.85, PKCS#12 MAC and bag-decryption KDF iteration-count bound (DoS)
|
5.3
Medium
|
Aug 3, 2026 |
| CVE-2026-13506 |
In Bouncy Castle for Java before 1.85, Lazy ASN.1 sequence forcing resets nesting-depth guard
|
8.7
High
|
Aug 3, 2026 |
| CVE-2026-12817 |
In Bouncy Castle for Java before 1.85, OpenPGP AEAD decryption skips final tag on chunk-aligned data
|
8.7
High
|
Aug 3, 2026 |
| CVE-2026-12802 |
In Bouncy Castle for Java before 1.85, CMS AuthEnvelopedData fails to enforce tag-length on decryption
|
8.7
High
|
Aug 3, 2026 |
| CVE-2026-14682 |
In Bouncy Castle for Java before 1.85, Possible OOM from unbounded up-front allocation on a definite-length read
|
8.7
High
|
Aug 3, 2026 |
| CVE-2026-58059 |
In Bouncy Castle for Java before 1.85, Quadratic-time escaping when stringifying X.500 distinguished names
|
8.7
High
|
Aug 3, 2026 |
| CVE-2026-58060 |
In Bouncy Castle for Java before 1.85, HSS public-key level count unbounded, enabling huge allocation on verify
|
8.7
High
|
Aug 3, 2026 |
| CVE-2026-58061 |
In Bouncy Castle for Java before 1.85, CCM-family modes write plaintext to caller buffer before tag check
|
8.7
High
|
Aug 3, 2026 |
| CVE-2026-58062 |
In Bouncy Castle for Java before 1.85, Stapled OCSP response accepted without binding to the checked certificate
|
9.3
Critical
|
Aug 3, 2026 |
| CVE-2026-58063 |
In Bouncy Castle for Java before 1.85, BCFKS keystore load honours unbounded KDF cost from untrusted file
|
5.3
Medium
|
Aug 3, 2026 |
| CVE-2026-59638 |
In Bouncy Castle for Java before 1.85, JSSE hostname verifier CN-fallback enabled by default despite documented opt-in
|
9.3
Critical
|
Aug 3, 2026 |
| CVE-2026-59639 |
In Bouncy Castle for Java before 1.85, CMS verifySignatures returns true for SignedData with zero signers
|
8.7
High
|
Aug 3, 2026 |
| CVE-2026-59640 |
In Bouncy Castle for Java before 1.85, OpenPGP CFB quick-check oracle active on symmetric/session-key paths
|
8.7
High
|
Aug 3, 2026 |
| CVE-2026-59641 |
In Bouncy Castle for Java before 1.85, S/MIME validator trusts signer-asserted signingTime for path validation
|
8.7
High
|
Aug 3, 2026 |
| CVE-2026-59642 |
In Bouncy Castle for Java before 1.85, CMS AuthenticatedData content not bound to MAC when authAttrs present
|
8.7
High
|
Aug 3, 2026 |
| CVE-2026-59643 |
In Bouncy Castle for Java before 1.85, OpenPGP inline-signature policy failures silently ignored
|
8.7
High
|
Aug 3, 2026 |
| CVE-2026-59645 |
In Bouncy Castle for Java before 1.85, OER parser recurses without depth limit on self-referential IEEE 1609.2 schema
|
8.7
High
|
Aug 3, 2026 |
| CVE-2026-59646 |
In Bouncy Castle for Java before 1.85, DTLS handshake reassembler allocates buffer from unchecked 24-bit length
|
8.7
High
|
Aug 3, 2026 |