| CVE-2026-71884 |
In Bouncy Castle for Java LTS before 2.73.13, the native one-shot CTR packet cipher did not check that the requested…
|
8.2
High
|
Oct 9, 2026 |
| CVE-2026-71883 |
In Bouncy Castle for Java LTS before 2.73.13, the one-shot native packet ciphers for AES-CBC, CCM, CFB, CTR, GCM and…
|
8.2
High
|
Oct 3, 2026 |
| CVE-2026-71888 |
In Bouncy Castle for Java before 1.86, the streaming CMS AuthenticatedData parser accepted a message whose…
|
8.7
High
|
Oct 3, 2026 |
| CVE-2026-71889 |
In Bouncy Castle for Java before 1.86, neither copy of PKIXCertPathReviewer -…
|
8.7
High
|
Oct 3, 2026 |
| CVE-2026-85515 |
In Bouncy Castle for Java before 1.86, a truncated OpenPGP encrypted message was accepted with no error reported, and on…
|
8.2
High
|
Oct 3, 2026 |
| CVE-2026-97873 |
In Bouncy Castle for Java before 1.86, the raw JCA provider's legacy PBES1 (PKCS#5 scheme 1) and PKCS#12 PBE families…
|
5.3
Medium
|
Oct 3, 2026 |
| CVE-2026-17508 |
In Bouncy Castle for Java before 1.86, several password-based key derivation entry points ran the KDF with cost…
|
5.3
Medium
|
Oct 2, 2026 |
| CVE-2026-13586 |
In Bouncy Castle for Java before 1.85, PKCS#12 MAC and bag-decryption KDF iteration-count bound (DoS)
|
5.3
Medium
|
Aug 3, 2026 |
| CVE-2026-13506 |
In Bouncy Castle for Java before 1.85, Lazy ASN.1 sequence forcing resets nesting-depth guard
|
8.7
High
|
Aug 3, 2026 |
| CVE-2026-12860 |
In Bouncy Castle for Java before 1.85, RSA PKCS#1 verification skips last two hash bytes in NULL-omitted path
|
8.7
High
|
Aug 3, 2026 |
| CVE-2026-12817 |
In Bouncy Castle for Java before 1.85, OpenPGP AEAD decryption skips final tag on chunk-aligned data
|
8.7
High
|
Aug 3, 2026 |
| CVE-2026-12816 |
In Bouncy Castle for Java before 1.85, IESEngine stream-mode MAC forgery via length-dependent KDF split
|
8.7
High
|
Aug 3, 2026 |
| CVE-2026-12803 |
In Bouncy Castle for Java before 1.85, KCCMBlockCipher MAC does not bind nonce when AAD is absent (cross-nonce AEAD…
|
8.7
High
|
Aug 3, 2026 |
| CVE-2026-12802 |
In Bouncy Castle for Java before 1.85, CMS AuthEnvelopedData fails to enforce tag-length on decryption
|
8.7
High
|
Aug 3, 2026 |
| CVE-2026-14682 |
In Bouncy Castle for Java before 1.85, Possible OOM from unbounded up-front allocation on a definite-length read
|
8.7
High
|
Aug 3, 2026 |
| CVE-2026-58059 |
In Bouncy Castle for Java before 1.85, Quadratic-time escaping when stringifying X.500 distinguished names
|
8.7
High
|
Aug 3, 2026 |
| CVE-2026-58060 |
In Bouncy Castle for Java before 1.85, HSS public-key level count unbounded, enabling huge allocation on verify
|
8.7
High
|
Aug 3, 2026 |
| CVE-2026-58061 |
In Bouncy Castle for Java before 1.85, CCM-family modes write plaintext to caller buffer before tag check
|
8.7
High
|
Aug 3, 2026 |
| CVE-2026-58062 |
In Bouncy Castle for Java before 1.85, Stapled OCSP response accepted without binding to the checked certificate
|
9.3
Critical
|
Aug 3, 2026 |
| CVE-2026-58063 |
In Bouncy Castle for Java before 1.85, BCFKS keystore load honours unbounded KDF cost from untrusted file
|
5.3
Medium
|
Aug 3, 2026 |
| CVE-2026-59638 |
In Bouncy Castle for Java before 1.85, JSSE hostname verifier CN-fallback enabled by default despite documented opt-in
|
9.3
Critical
|
Aug 3, 2026 |
| CVE-2026-59639 |
In Bouncy Castle for Java before 1.85, CMS verifySignatures returns true for SignedData with zero signers
|
8.7
High
|
Aug 3, 2026 |
| CVE-2026-59640 |
In Bouncy Castle for Java before 1.85, OpenPGP CFB quick-check oracle active on symmetric/session-key paths
|
8.7
High
|
Aug 3, 2026 |
| CVE-2026-59641 |
In Bouncy Castle for Java before 1.85, S/MIME validator trusts signer-asserted signingTime for path validation
|
8.7
High
|
Aug 3, 2026 |
| CVE-2026-59642 |
In Bouncy Castle for Java before 1.85, CMS AuthenticatedData content not bound to MAC when authAttrs present
|
8.7
High
|
Aug 3, 2026 |