CVE-2026-5778 Integer underflow leads to out-of-bounds access in sniffer ChaCha decrypt path.
Published April 30, 2026
Information published.
Microsoft Security Response Center Blog Alerts
CVE-2026-5188 Integer underflow in X.509 SAN parsing in wolfSSL
Published April 30, 2026
Information published.
CVE-2019-1543 ChaCha20-Poly1305 with long nonces
Published April 30, 2026
Information published.
CVE-2026-5295 Stack Buffer Overflow in wolfSSL PKCS7 wc_PKCS7_DecryptOri() via Oversized OID
Published April 30, 2026
Information published.
CVE-2026-5503 out-of-bounds write in TLSX_EchChangeSNI via attacker-controlled publicName
Published April 30, 2026
Information published.
CVE-2019-1563 Padding Oracle in PKCS7_dataDecode and CMS_decrypt_set1_pkey
Published April 30, 2026
Information published.
CVE-2026-5507 Session Cache Restore — Arbitrary Free via Deserialized Pointer
Published April 30, 2026
Information published.
CVE-2019-1551 rsaz_512_sqr overflow bug on x86_64
Published April 30, 2026
Information published.
CVE-2026-5504 PKCS7 CBC Padding Oracle — Plaintext Recovery
Published April 30, 2026
Information published.
CVE-2026-33825 Microsoft Defender Elevation of Privilege Vulnerability
Published April 30, 2026
Added FAQ information. This is an informational change only.
