Home / CVEs

CVE Database

Published vulnerabilities with severity, known exploitation and official sources.

27 result(s)

Export this search: RSS · CSV · STIX

CVE-2026-22863 High · 7.5 CWE-325 Jan 15, 2026

Deno node:crypto doesn't finalize cipher

Deno is a JavaScript, TypeScript, and WebAssembly runtime. Before 2.6.0, node:crypto doesn't finalize cipher. The vulnerability allows an attacker to have infinite encryptions. This can lead to naive attempts at brute forcing, as well as more refined attacks with the goal to learn the server secrets. This vulnerability is fixed in 2.6.0.

CVE-2025-60704 High · 7.5 CWE-325 Nov 11, 2025

Windows Kerberos Elevation of Privilege Vulnerability

Missing cryptographic step in Windows Kerberos allows an unauthorized attacker to elevate privileges over a network.