https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 23:59:14 +0000 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1001 certfr-2026-avi-1001 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1001 https://cve.radiocsirt.org/vuln/euvd-2026-351650 EUVD-2026-351650 https://cve.radiocsirt.org/vuln/euvd-2026-351650 https://cve.radiocsirt.org/vuln/fkie_cve-2026-6727 <p>A timing side-channel vulnerability exists in the RSA OAEP decryption implementation. A privileged local attacker with access to the TPM command interface may be able to exploit timing differences to recover information that could allow decryption of ciphertexts encrypted to TPM-managed RSA keys, including the RSA Endorsement Key (EK), including import blobs, credential blobs, and session salts. Under certain conditions, this may also enable the forgery of TPM 2.0 attestations. Refer to TCGVRT0011.</p> <p>A timing side-channel vulnerability exists in the RSA OAEP decryption implementation. A privileged local attacker with access to the TPM command interface may be able to exploit timing differences to recover information that could allow decryption of ciphertexts encrypted to TPM-managed RSA keys, including the RSA Endorsement Key (EK), including import blobs, credential blobs, and session salts. Under certain conditions, this may also enable the forgery of TPM 2.0 attestations. Refer to TCGVRT0011.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-6727 https://cve.radiocsirt.org/vuln/ghsa-fv5r-gp2c-7mwv <p>A timing side-channel vulnerability exists in the RSA OAEP decryption implementation. A privileged local attacker with access to the TPM command interface may be able to exploit timing differences to recover information that could allow decryption of ciphertexts encrypted to TPM-managed RSA keys, including the RSA Endorsement Key (EK), including import blobs, credential blobs, and session salts. Under certain conditions, this may also enable the forgery of TPM 2.0 attestations. Refer to TCGVRT0011.</p> <p>A timing side-channel vulnerability exists in the RSA OAEP decryption implementation. A privileged local attacker with access to the TPM command interface may be able to exploit timing differences to recover information that could allow decryption of ciphertexts encrypted to TPM-managed RSA keys, including the RSA Endorsement Key (EK), including import blobs, credential blobs, and session salts. Under certain conditions, this may also enable the forgery of TPM 2.0 attestations. Refer to TCGVRT0011.</p> https://cve.radiocsirt.org/vuln/ghsa-fv5r-gp2c-7mwv https://cve.radiocsirt.org/vuln/jvndb-2026-035789 <p>CVE-2026-42976 | Remote Access Management service/API (RPC server) Elevation of Privilege Vulnerability CVE-2026-49179 | Windows Active Directory Domain Services Remote Code Execution Vulnerability CVE-2026-50472 | Windows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerability CVE-2026-54113 | Remote Procedure Call Denial of Service Vulnerability CVE-2026-54984 | Windows Imaging Component Remote Code Execution Vulnerability CVE-2026-56174 | Windows Narrator Braille Elevation of Privilege Vulnerability CVE-2026-59122 | Windows Telephony Service Elevation of Privilege Vulnerability CVE-2026-59125 | Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability CVE-2026-59126 | Windows Event Logging Service Elevation of Privilege Vulnerability CVE-2026-59127 | Windows Installer Elevation of Privilege Vulnerability CVE-2026-59128 | Windows Encrypting File System (EFS) Information Disclosure Vulnerability CVE-2026-59130 | AMD Zen Information Disclosure Vulnerability CVE-2026-59131 | AMD Zen Information Disclosure Vulnerability CVE-2026-59132 | Windows TCP/IP Denial of Service Vulnerability CVE-2026-59134 | Remote Desktop Client Remote Code Execution Vulnerability CVE-2026-59135 | Microsoft Windows Search Component Information Disclosure Vulnerability CVE-2026-59136 | Microsoft COM for Windows Information Disclosure Vulnerability CVE-2026-59137 | Windows Event Logging Service Information Disclosure Vulnerability CVE-2026-59138 |…</p> <p>CVE-2026-42976 | Remote Access Management service/API (RPC server) Elevation of Privilege Vulnerability CVE-2026-49179 | Windows Active Directory Domain Services Remote Code Execution Vulnerability CVE-2026-50472 | Windows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerability CVE-2026-54113 | Remote Procedure Call Denial of Service Vulnerability CVE-2026-54984 | Windows Imaging Component Remote Code Execution Vulnerability CVE-2026-56174 | Windows Narrator Braille Elevation of Privilege Vulnerability CVE-2026-59122 | Windows Telephony Service Elevation of Privilege Vulnerability CVE-2026-59125 | Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability CVE-2026-59126 | Windows Event Logging Service Elevation of Privilege Vulnerability CVE-2026-59127 | Windows Installer Elevation of Privilege Vulnerability CVE-2026-59128 | Windows Encrypting File System (EFS) Information Disclosure Vulnerability CVE-2026-59130 | AMD Zen Information Disclosure Vulnerability CVE-2026-59131 | AMD Zen Information Disclosure Vulnerability CVE-2026-59132 | Windows TCP/IP Denial of Service Vulnerability CVE-2026-59134 | Remote Desktop Client Remote Code Execution Vulnerability CVE-2026-59135 | Microsoft Windows Search Component Information Disclosure Vulnerability CVE-2026-59136 | Microsoft COM for Windows Information Disclosure Vulnerability CVE-2026-59137 | Windows Event Logging Service Information Disclosure Vulnerability CVE-2026-59138 |…</p> https://cve.radiocsirt.org/vuln/jvndb-2026-035789 https://cve.radiocsirt.org/vuln/msrc_cve-2026-6727 msrc_CVE-2026-6727 https://cve.radiocsirt.org/vuln/msrc_cve-2026-6727 https://cve.radiocsirt.org/vuln/ncsc-2026-0284 NCSC-2026-0284 https://cve.radiocsirt.org/vuln/ncsc-2026-0284 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-6727 <p><strong>Affected:</strong> Ubuntu:22.04:LTS: libtpms, Ubuntu:24.04:LTS: libtpms, Ubuntu:26.04:LTS: libtpms</p> <p>A timing side-channel vulnerability exists in the RSA OAEP decryption implementation. A privileged local attacker with access to the TPM command interface may be able to exploit timing differences to recover information that could allow decryption of ciphertexts encrypted to TPM-managed RSA keys, including the RSA Endorsement Key (EK), including import blobs, credential blobs, and session salts. Under certain conditions, this may also enable the forgery of TPM 2.0 attestations. Refer to TCGVRT0011.</p> <p><strong>Affected:</strong> Ubuntu:22.04:LTS: libtpms, Ubuntu:24.04:LTS: libtpms, Ubuntu:26.04:LTS: libtpms</p> <p>A timing side-channel vulnerability exists in the RSA OAEP decryption implementation. A privileged local attacker with access to the TPM command interface may be able to exploit timing differences to recover information that could allow decryption of ciphertexts encrypted to TPM-managed RSA keys, including the RSA Endorsement Key (EK), including import blobs, credential blobs, and session salts. Under certain conditions, this may also enable the forgery of TPM 2.0 attestations. Refer to TCGVRT0011.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-6727 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2756 <p>Ein Angreifer kann mehrere Schwachstellen in Microsoft Windows Server 2012, Microsoft Windows Server 2012 R2, Microsoft Windows Server 2016, Microsoft Windows 10, Microsoft Windows Server 2019, Microsoft Windows Server 2022, Microsoft Exchange, Microsoft Windows 11, Microsoft Windows Server 2025 und Microsoft Windows ausnutzen, um beliebigen Programmcode auszuführen, um seine Privilegien zu erhöhen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren, um einen Cross-Site Scripting Angriff durchzuführen, und um Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Microsoft Windows Server 2012, Microsoft Windows Server 2012 R2, Microsoft Windows Server 2016, Microsoft Windows 10, Microsoft Windows Server 2019, Microsoft Windows Server 2022, Microsoft Exchange, Microsoft Windows 11, Microsoft Windows Server 2025 und Microsoft Windows ausnutzen, um beliebigen Programmcode auszuführen, um seine Privilegien zu erhöhen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren, um einen Cross-Site Scripting Angriff durchzuführen, und um Sicherheitsvorkehrungen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2756