| CVE-2026-71890 |
In Bouncy Castle for Java before 1.86, validation of an MLS (RFC 9420) external commit's proposal list,…
|
8.7
High
|
Oct 3, 2026 |
| CVE-2026-71891 |
In Bouncy Castle for Java before 1.86, BLS12_381BasicScheme.keyValidate, and so BLSPublicKeyParameters and every…
|
7.1
High
|
Oct 3, 2026 |
| CVE-2026-18040 |
In Bouncy Castle for Java before 1.86, HQC leaked secret-derived data through two side channels: its GF(2^8)…
|
5.9
Medium
|
Oct 3, 2026 |
| CVE-2026-71885 |
In Bouncy Castle for Java before 1.86, the Messaging Layer Security (MLS, RFC 9420) implementation did not bind an X.509…
|
9.2
Critical
|
Oct 3, 2026 |
| CVE-2026-71886 |
In Bouncy Castle for Java before 1.86, the high-level OpenPGP certificate API accepted a third-party certification or…
|
8.2
High
|
Oct 3, 2026 |
| CVE-2026-71887 |
In Bouncy Castle for Java before 1.86, the high-level OpenPGP API accepted a data signature made by a signing subkey…
|
8.2
High
|
Oct 3, 2026 |
| CVE-2026-71888 |
In Bouncy Castle for Java before 1.86, the streaming CMS AuthenticatedData parser accepted a message whose…
|
8.7
High
|
Oct 3, 2026 |
| CVE-2026-71889 |
In Bouncy Castle for Java before 1.86, neither copy of PKIXCertPathReviewer -…
|
8.7
High
|
Oct 3, 2026 |
| CVE-2026-71892 |
In Bouncy Castle for Java before 1.86, the opt-in key-size validation on CMS key-transport recipients,…
|
6.9
Medium
|
Oct 3, 2026 |
| CVE-2026-85515 |
In Bouncy Castle for Java before 1.86, a truncated OpenPGP encrypted message was accepted with no error reported, and on…
|
8.2
High
|
Oct 3, 2026 |
| CVE-2026-97873 |
In Bouncy Castle for Java before 1.86, the raw JCA provider's legacy PBES1 (PKCS#5 scheme 1) and PKCS#12 PBE families…
|
5.3
Medium
|
Oct 3, 2026 |
| CVE-2026-18036 |
In Bouncy Castle for Java before 1.86, NTRU reduced secret values with the % operator in three helpers whose reference…
|
8.2
High
|
Oct 2, 2026 |
| CVE-2026-17508 |
In Bouncy Castle for Java before 1.86, several password-based key derivation entry points ran the KDF with cost…
|
5.3
Medium
|
Oct 2, 2026 |
| CVE-2026-17507 |
In Bouncy Castle for Java before 1.86, the MLS implementation (org.bouncycastle.mls) holds RFC 9420's uint32…
|
8.7
High
|
Oct 2, 2026 |
| CVE-2026-13586 |
In Bouncy Castle for Java before 1.85, PKCS#12 MAC and bag-decryption KDF iteration-count bound (DoS)
|
5.3
Medium
|
Aug 3, 2026 |
| CVE-2026-13506 |
In Bouncy Castle for Java before 1.85, Lazy ASN.1 sequence forcing resets nesting-depth guard
|
8.7
High
|
Aug 3, 2026 |
| CVE-2026-12860 |
In Bouncy Castle for Java before 1.85, RSA PKCS#1 verification skips last two hash bytes in NULL-omitted path
|
8.7
High
|
Aug 3, 2026 |
| CVE-2026-12852 |
In Bouncy Castle for Java before 1.85, MLS wire decoder allocates attacker-declared opaque length before bounds check
|
8.7
High
|
Aug 3, 2026 |
| CVE-2026-12817 |
In Bouncy Castle for Java before 1.85, OpenPGP AEAD decryption skips final tag on chunk-aligned data
|
8.7
High
|
Aug 3, 2026 |
| CVE-2026-12816 |
In Bouncy Castle for Java before 1.85, IESEngine stream-mode MAC forgery via length-dependent KDF split
|
8.7
High
|
Aug 3, 2026 |
| CVE-2026-12803 |
In Bouncy Castle for Java before 1.85, KCCMBlockCipher MAC does not bind nonce when AAD is absent (cross-nonce AEAD…
|
8.7
High
|
Aug 3, 2026 |
| CVE-2026-12802 |
In Bouncy Castle for Java before 1.85, CMS AuthEnvelopedData fails to enforce tag-length on decryption
|
8.7
High
|
Aug 3, 2026 |
| CVE-2026-14682 |
In Bouncy Castle for Java before 1.85, Possible OOM from unbounded up-front allocation on a definite-length read
|
8.7
High
|
Aug 3, 2026 |
| CVE-2026-58059 |
In Bouncy Castle for Java before 1.85, Quadratic-time escaping when stringifying X.500 distinguished names
|
8.7
High
|
Aug 3, 2026 |
| CVE-2026-58060 |
In Bouncy Castle for Java before 1.85, HSS public-key level count unbounded, enabling huge allocation on verify
|
8.7
High
|
Aug 3, 2026 |