CVE-2026-59642 - In Bouncy Castle for Java before 1.85, CMS AuthenticatedData content not bound to MAC when authAttrs present. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bcpkix-fips 1.0.12 (1.0.X series), 2.0.12 (2.0.X series) and 2.1.12 (2.1.X series). - 漏洞详情

漏洞描述

相关链接

相关漏洞

• CVE-2026-75803 [未知] CVE-2026-75803 - Issue summary: ChaCha20-Poly1305 and AES-OCB decrypti…
• CVE-2026-59646 [高危] CVE-2026-59646 - In Bouncy Castle for Java before 1.85, DTLS handshake…
• CVE-2026-59645 [高危] CVE-2026-59645 - In Bouncy Castle for Java before 1.85, OER parser rec…
• CVE-2026-59647 [中危] CVE-2026-59647 - In Bouncy Castle for Java before 1.85, CRMF/CMP passw…
• CVE-2026-59648 [中危] CVE-2026-59648 - In Bouncy Castle for Java before 1.85, OpenPGP Argon2…
• CVE-2026-59642 [高危] CVE-2026-59642 - In Bouncy Castle for Java before 1.85, CMS Authentica…
• CVE-2026-59641 [中危] CVE-2026-59641 - In Bouncy Castle for Java before 1.85, S/MIME validat…
• CVE-2026-14682 [高危] CVE-2026-14682 - In Bouncy Castle for Java before 1.85, Possible OOM f…