Known vulnerabilities in Bouncy Castle for Java

Software CPE: cpe:2.3:a:legion_of_the_bouncy_castle:bc-java:*:*:*:*:*:*:*:*
Total vulnerabilities: 58
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Bouncy Castle for Java Bouncy Castle for Java is affected by 58 known vulnerabilities: 2 high, 48 medium, 8 low Critical High Medium Low

Vulnerabilities (58)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU146451 - Resource exhaustion
CVE-2026-58063
CWE-400 Medium
No
No
1.85 31.08.2026 SB2026083171
SB20260831105
SB2026091409
and 3 more
#VU146454 - Observable discrepancy
CVE-2026-59640
CWE-203 Medium
No
No
1.85 31.08.2026 SB2026083171
SB20260831105
SB2026090816
and 1 more
#VU146455 - Improper Certificate Validation
CVE-2026-59641
CWE-295 Medium
No
No
1.85 31.08.2026 SB2026083171
SB20260831105
#VU146456 - Insufficient Verification of Data Authenticity
CVE-2026-59642
CWE-345 Medium
No
No
1.85 31.08.2026 SB2026083171
SB2026083172
SB20260831105
and 7 more
#VU146457 - Protection Mechanism Failure
CVE-2026-59643
CWE-693 Medium
No
No
1.85 31.08.2026 SB2026083171
SB20260831105
SB2026091416
#VU146458 - Resource exhaustion
CVE-2026-59644
CWE-400 Medium
No
No
1.85 31.08.2026 SB2026083171
SB20260831105
#VU146459 - Uncontrolled Recursion
CVE-2026-59645
CWE-674 Medium
No
No
1.85 31.08.2026 SB2026083171
SB20260831105
SB2026091409
and 4 more
#VU146460 - Uncontrolled Memory Allocation
CVE-2026-59646
CWE-789 Medium
No
No
1.85 31.08.2026 SB2026083171
SB20260831105
SB2026091409
#VU146461 - Resource exhaustion
CVE-2026-59647
CWE-400 Medium
No
No
1.85 31.08.2026 SB2026083171
SB20260831105
SB2026091409
and 2 more
#VU146462 - Resource exhaustion
CVE-2026-59648
CWE-400 Medium
No
No
1.85 31.08.2026 SB2026083171
SB20260831105
SB2026090816
and 4 more
#VU146463 - Uncontrolled Memory Allocation
CVE-2026-59649
CWE-789 Medium
No
No
1.85 31.08.2026 SB2026083171
SB20260831105
SB2026090816
and 1 more
#VU146464 - Improper input validation
CVE-2026-59650
CWE-20 Medium
No
No
1.85 31.08.2026 SB2026083171
SB20260831105
SB2026091409
and 6 more
#VU146465 - Inadequate Encryption Strength
CVE-2026-59651
CWE-326 Medium
No
No
1.85 31.08.2026 SB2026083171
SB20260831105
SB2026091409
and 3 more
#VU146435 - Improper Certificate Validation
CVE-2026-8763
CWE-295 Medium
No
No
1.85 31.08.2026 SB2026083171
SB20260831105
SB2026091409
and 7 more
#VU146436 - Uncontrolled Memory Allocation
CVE-2026-12185
CWE-789 Medium
No
No
1.85 31.08.2026 SB2026083171
SB20260831105
SB2026091409
and 3 more
#VU146437 - Insufficient Verification of Data Authenticity
CVE-2026-12802
CWE-345 Medium
No
No
1.85 31.08.2026 SB2026083171
SB2026083172
SB20260831105
and 7 more
#VU146438 - Improper Verification of Cryptographic Signature
CVE-2026-12803
CWE-347 Medium
No
No
1.85 31.08.2026 SB2026083171
SB2026083172
SB20260831105
and 9 more
#VU146439 - Improper Verification of Cryptographic Signature
CVE-2026-12816
CWE-347 Medium
No
No
1.85 31.08.2026 SB2026083171
SB2026083172
SB20260831105
and 9 more
#VU146440 - Insufficient Verification of Data Authenticity
CVE-2026-12817
CWE-345 Medium
No
No
1.85 31.08.2026 SB2026083171
SB20260831105
SB2026091416
#VU146442 - Improper Verification of Cryptographic Signature
CVE-2026-12860
CWE-347 Medium
No
No
1.85 31.08.2026 SB2026083171
SB20260831105
SB2026091409
and 3 more


Showing elements 1 - 20 out of 58