| CVE-2026-58061 |
In Bouncy Castle for Java before 1.85, CCM-family modes write plaintext to caller buffer before tag check
|
8.7
High
|
Aug 3, 2026 |
| CVE-2026-58062 |
In Bouncy Castle for Java before 1.85, Stapled OCSP response accepted without binding to the checked certificate
|
9.3
Critical
|
Aug 3, 2026 |
| CVE-2026-58063 |
In Bouncy Castle for Java before 1.85, BCFKS keystore load honours unbounded KDF cost from untrusted file
|
5.3
Medium
|
Aug 3, 2026 |
| CVE-2026-59638 |
In Bouncy Castle for Java before 1.85, JSSE hostname verifier CN-fallback enabled by default despite documented opt-in
|
9.3
Critical
|
Aug 3, 2026 |
| CVE-2026-59639 |
In Bouncy Castle for Java before 1.85, CMS verifySignatures returns true for SignedData with zero signers
|
8.7
High
|
Aug 3, 2026 |
| CVE-2026-59640 |
In Bouncy Castle for Java before 1.85, OpenPGP CFB quick-check oracle active on symmetric/session-key paths
|
8.7
High
|
Aug 3, 2026 |
| CVE-2026-59641 |
In Bouncy Castle for Java before 1.85, S/MIME validator trusts signer-asserted signingTime for path validation
|
8.7
High
|
Aug 3, 2026 |
| CVE-2026-59642 |
In Bouncy Castle for Java before 1.85, CMS AuthenticatedData content not bound to MAC when authAttrs present
|
8.7
High
|
Aug 3, 2026 |
| CVE-2026-59643 |
In Bouncy Castle for Java before 1.85, OpenPGP inline-signature policy failures silently ignored
|
8.7
High
|
Aug 3, 2026 |
| CVE-2026-59644 |
In Bouncy Castle for Java before 1.85, MLS hash-ratchet honours arbitrary 32-bit generation counter from sender
|
8.7
High
|
Aug 3, 2026 |
| CVE-2026-59645 |
In Bouncy Castle for Java before 1.85, OER parser recurses without depth limit on self-referential IEEE 1609.2 schema
|
8.7
High
|
Aug 3, 2026 |
| CVE-2026-59646 |
In Bouncy Castle for Java before 1.85, DTLS handshake reassembler allocates buffer from unchecked 24-bit length
|
8.7
High
|
Aug 3, 2026 |
| CVE-2026-59647 |
In Bouncy Castle for Java before 1.85, CRMF/CMP password-MAC honours unbounded iteration count
|
6.9
Medium
|
Aug 3, 2026 |
| CVE-2026-59648 |
In Bouncy Castle for Java before 1.85, OpenPGP Argon2 S2K honours attacker-chosen memory and passes
|
6.9
Medium
|
Aug 3, 2026 |
| CVE-2026-59649 |
In Bouncy Castle for Java before 1.85, OpenPGP user-attribute subpacket length bounded only by JVM max memory
|
8.7
High
|
Aug 3, 2026 |
| CVE-2026-59650 |
In Bouncy Castle for Java before 1.85, MTI/A0 DH agreement exponentiates unvalidated peer value
|
9.3
Critical
|
Aug 3, 2026 |
| CVE-2026-59651 |
In Bouncy Castle for Java before 1.85, BKS keystore accepts legacy version with 16-bit integrity MAC key
|
7.1
High
|
Aug 3, 2026 |
| CVE-2026-59652 |
In Bouncy Castle for Java before 1.85, LDAP filter injection in legacy jdk1.4 LDAPStoreHelper
|
6.9
Medium
|
Aug 3, 2026 |
| CVE-2026-12185 |
In Bouncy Castle for Java before 1.85, BKS/UBER keystore allocates from untrusted lengths before integrity check
|
7.1
High
|
Aug 3, 2026 |
| CVE-2026-8763 |
In Bouncy Castle for Java before 1.85, Name Constraints bypass via trailing dot in rfc822Name and URI
|
9.3
Critical
|
Aug 3, 2026 |
| CVE-2026-15055 |
In Bouncy Castle for Java before 1.85, PKCS#8 / PBES2 decryptors honour unbounded KDF cost from input
|
5.3
Medium
|
Aug 3, 2026 |
| CVE-2024-14041 |
In Bouncy Castle for Java from 1.73 to before 1.78, three ML-KEM (CRYSTALS-Kyber) routines divided secret-derived…
|
8.2
High
|
Jul 28, 2026 |
| CVE-2026-3505 |
Allocation of resources without limits or throttling, Uncontrolled Resource Consumption vulnerability in Legion of the…
|
8.7
High
|
Apr 15, 2026 |
| CVE-2026-5588 |
Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy Castle Inc
|
6.3
Medium
|
Apr 15, 2026 |
| CVE-2026-5598 |
Covert timing channel vulnerability in Legion of the Bouncy Castle Inc
|
8.9
High
|
Apr 15, 2026 |