Zurück zur CVE-Übersicht
CVE-2026-12185
HIGH(8.6)CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
Risk Signal Score22/100 — NIEDRIG
- CVSS 8.6 — Hoch
Erwähnungen (letzte 60 Tage)
Artikel
EPSS-Score
0.3%
Exploit-Wahrscheinlichkeit (30 Tage)
CVSS Score
8.6
Technische Schwere
Beschreibung
In Bouncy Castle for Java before 1.85, BKS/UBER keystore allocates from untrusted lengths before integrity check. This issue also affects Bouncy Castle for Java LTS before 2.73.12.
Betroffene Produkte
- cpe:2.3:a:bouncycastle:bc-java:*:*:*:*:*:*:*:*
- cpe:2.3:a:bouncycastle:bouncy_castle_for_java_lts:*:*:*:*:*:*:*:*