Known vulnerabilities in Bouncy Castle for Java - page 2

Software CPE: cpe:2.3:a:legion_of_the_bouncy_castle:bc-java:*:*:*:*:*:*:*:*
Total vulnerabilities: 58
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Bouncy Castle for Java Bouncy Castle for Java is affected by 58 known vulnerabilities: 2 high, 48 medium, 8 low Critical High Medium Low

Vulnerabilities (58)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU146450 - Improper Certificate Validation
CVE-2026-58062
CWE-295 High
No
No
1.85 31.08.2026 SB2026083171
SB20260831105
SB2026091409
and 3 more
#VU146452 - Improper Validation of Certificate with Host Mismatch
CVE-2026-59638
CWE-297 Medium
No
No
1.85 31.08.2026 SB2026083171
SB20260831105
SB2026091409
#VU146453 - Improper input validation
CVE-2026-59639
CWE-20 Medium
No
No
1.85 31.08.2026 SB2026083171
SB2026083172
SB20260831105
and 7 more
#VU146466 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
CVE-2026-59652
CWE-90 Medium
No
No
1.85 31.08.2026 SB2026083171
SB20260831105
SB2026091409
and 3 more
#VU146441 - Uncontrolled Memory Allocation
CVE-2026-12852
CWE-789 Medium
No
No
1.85 31.08.2026 SB2026083171
SB20260831105
SB2026092175
#VU146443 - Uncontrolled Recursion
CVE-2026-13506
CWE-674 Medium
No
No
1.85 31.08.2026 SB2026083171
SB2026083172
SB20260831105
and 9 more
#VU146444 - Resource exhaustion
CVE-2026-13586
CWE-400 Medium
No
No
1.85 31.08.2026 SB2026083171
SB20260831105
SB2026091409
and 3 more
#VU146445 - Uncontrolled Memory Allocation
CVE-2026-14682
CWE-789 Medium
No
No
1.85 31.08.2026 SB2026083171
SB2026083172
SB20260831105
and 9 more
#VU146446 - Resource exhaustion
CVE-2026-15055
CWE-400 Medium
No
No
1.85 31.08.2026 SB2026083171
SB20260831105
SB2026091409
and 3 more
#VU146447 - Inefficient Algorithmic Complexity
CVE-2026-58059
CWE-407 Medium
No
No
1.85 31.08.2026 SB2026083171
SB2026083172
SB20260831105
and 8 more
#VU146448 - Uncontrolled Memory Allocation
CVE-2026-58060
CWE-789 Medium
No
No
1.85 31.08.2026 SB2026083171
SB2026083172
SB20260831105
and 9 more
#VU146449 - Insufficient Verification of Data Authenticity
CVE-2026-58061
CWE-345 Medium
No
No
1.85 31.08.2026 SB2026083171
SB20260831105
SB2026091409
and 2 more
#VU132273 - Incorrect Calculation
CVE-2025-14813
CWE-682 Medium
No
No
1.80.2, 1.81.1, 1.84 25.05.2026 SB2026052529
SB2026052540
SB2026052541
and 21 more
#VU132262 - Resource exhaustion
CVE-2026-3505
CWE-400 Medium
No
No
1.80.2, 1.81.1, 1.84 25.05.2026 SB2026052529
SB2026052531
SB2026052542
and 4 more
#VU132261 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
CVE-2026-0636
CWE-90 Medium
No
No
1.80.2, 1.81.1, 1.84 25.05.2026 SB2026052529
SB2026052531
SB2026052540
and 16 more
#VU132260 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2026-5588
CWE-327 Medium
No
No
1.80.2, 1.81.1, 1.84 25.05.2026 SB2026052529
SB2026052531
SB2026052540
and 18 more
#VU132259 - Covert Timing Channel
CVE-2026-5598
CWE-385 Medium
No
No
1.80.1, 1.81.1, 1.84 25.05.2026 SB2026052530
SB2026052544
SB2026052931
and 19 more
#VU117436 - Allocation of Resources Without Limits or Throttling
CVE-2025-8916
CWE-770 Medium
No
No
1.79 21.10.2025 SB2025102223
SB2025102241
SB2025102248
and 36 more
#VU89219 - Observable discrepancy
CVE-2024-30171
CWE-203 Medium
No
No
1.78 07.05.2024 SB2024050731
SB2024050734
SB2024061019
and 59 more
#VU89218 - Resource exhaustion
CVE-2024-29857
CWE-400 Medium
No
No
1.78 07.05.2024 SB2024050731
SB2024061019
SB20240611170
and 69 more


Showing elements 21 - 40 out of 58