CWE-299
23 published CVEs are weaknesses of this kind, as the records or NVD name it.
- 23Published CVEs23 of them scored
- 16Last 12 monthspublished in the last year
- 2Critical9 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-109462
Azure Firmware Security Feature Bypass Vulnerability
Microsoft · Azure Virtual Machines
Medium4.4 - CVE-2026-118696
In JetBrains IntelliJ IDEA, PyCharm, PhpStorm, RubyMine and WebStorm before 2026.3, 2026.2.4, 2026.1.5.1, and 2025.3.6.2; GoLand before 2026.3, 2026.2.4,…
JetBrains · IntelliJ IDEA
High8.0 - CVE-2026-115557
Distrust compromised intermediate certificates in ssl module
Python Software Foundation · CPython
Critical9.4 - CVE-2026-115570
Electron: Mitigation for compromised eMudhra intermediate certificates
electron · electron
High7.4 - CVE-2026-111943
Distrust compromised intermediate certificates in crypto/x509
Go standard library · crypto/x509
Medium6.8 - CVE-2026-102221
Secure Boot Security Feature Bypass Vulnerability
Microsoft · Windows 10 Version 1607
Medium4.4 - CVE-2026-94417
CRL check skipped when OCSP enabled and certificate has no OCSP URL
wolfSSL · wolfSSL
Low2.3 - CVE-2026-73581
Apache Tomcat: OpenSSL and OpenSSL-FFM TLS implementations ignore CRLs when certificate uses a keystore
Apache Software Foundation · Apache Tomcat
Medium6.5 - CVE-2026-93602
rustls-webpki before 0.103.10 CRL Revocation Check Bypass
rustls · webpki
Medium5.9 - CVE-2026-93493
Io.netty/netty-handler-ssl-ocsp: netty: ocsp validation silently skipped when a response omits the optional nextupdate field
Red Hat · Red Hat build of Apache Camel for Spring Boot 4
Medium5.9