Known vulnerabilities in Bouncy Castle for Java LTS

Vendor: Legion of the Bouncy Castle Inc.
Software: Bouncy Castle for Java LTS
Software CPE: cpe:2.3:a:legion_of_the_bouncy_castle:bc-lts:*:*:*:*:*:*:*:*
Website: https://www.bouncycastle.org/
Total vulnerabilities: 35
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Bouncy Castle for Java LTS Bouncy Castle for Java LTS is affected by 35 known vulnerabilities: 1 high, 34 medium Critical High Medium Low

Vulnerabilities (35)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU146450 - Improper Certificate Validation
CVE-2026-58062		 CWE-295 High
No
No
 2.73.12 31.08.2026 SB2026083171
SB20260831105
SB2026091409
and 3 more
#VU146451 - Resource exhaustion
CVE-2026-58063		 CWE-400 Medium
No
No
 2.73.12 31.08.2026 SB2026083171
SB20260831105
SB2026091409
and 3 more
#VU146453 - Improper input validation
CVE-2026-59639		 CWE-20 Medium
No
No
 2.73.12 31.08.2026 SB2026083171
SB2026083172
SB20260831105
and 7 more
#VU146454 - Observable discrepancy
CVE-2026-59640		 CWE-203 Medium
No
No
 2.73.12 31.08.2026 SB2026083171
SB20260831105
SB2026090816
and 1 more
#VU146455 - Improper Certificate Validation
CVE-2026-59641		 CWE-295 Medium
No
No
 2.73.12 31.08.2026 SB2026083171
SB20260831105
#VU146435 - Improper Certificate Validation
CVE-2026-8763		 CWE-295 Medium
No
No
 2.73.12 31.08.2026 SB2026083171
SB20260831105
SB2026091409
and 7 more
#VU146436 - Uncontrolled Memory Allocation
CVE-2026-12185		 CWE-789 Medium
No
No
 2.73.12 31.08.2026 SB2026083171
SB20260831105
SB2026091409
and 3 more
#VU146437 - Insufficient Verification of Data Authenticity
CVE-2026-12802		 CWE-345 Medium
No
No
 2.73.12 31.08.2026 SB2026083171
SB2026083172
SB20260831105
and 7 more
#VU146438 - Improper Verification of Cryptographic Signature
CVE-2026-12803		 CWE-347 Medium
No
No
 2.73.12 31.08.2026 SB2026083171
SB2026083172
SB20260831105
and 9 more
#VU146439 - Improper Verification of Cryptographic Signature
CVE-2026-12816		 CWE-347 Medium
No
No
 2.73.12 31.08.2026 SB2026083171
SB2026083172
SB20260831105
and 9 more
#VU146440 - Insufficient Verification of Data Authenticity
CVE-2026-12817		 CWE-345 Medium
No
No
 2.73.12 31.08.2026 SB2026083171
SB20260831105
SB2026091416
#VU146441 - Uncontrolled Memory Allocation
CVE-2026-12852		 CWE-789 Medium
No
No
 2.73.12 31.08.2026 SB2026083171
SB20260831105
SB2026092175
#VU146442 - Improper Verification of Cryptographic Signature
CVE-2026-12860		 CWE-347 Medium
No
No
 2.73.12 31.08.2026 SB2026083171
SB20260831105
SB2026091409
and 3 more
#VU146443 - Uncontrolled Recursion
CVE-2026-13506		 CWE-674 Medium
No
No
 2.73.12 31.08.2026 SB2026083171
SB2026083172
SB20260831105
and 9 more
#VU146444 - Resource exhaustion
CVE-2026-13586		 CWE-400 Medium
No
No
 2.73.12 31.08.2026 SB2026083171
SB20260831105
SB2026091409
and 3 more
#VU146445 - Uncontrolled Memory Allocation
CVE-2026-14682		 CWE-789 Medium
No
No
 2.73.12 31.08.2026 SB2026083171
SB2026083172
SB20260831105
and 9 more
#VU146446 - Resource exhaustion
CVE-2026-15055		 CWE-400 Medium
No
No
 2.73.12 31.08.2026 SB2026083171
SB20260831105
SB2026091409
and 3 more
#VU146447 - Inefficient Algorithmic Complexity
CVE-2026-58059		 CWE-407 Medium
No
No
 2.73.12 31.08.2026 SB2026083171
SB2026083172
SB20260831105
and 8 more
#VU146448 - Uncontrolled Memory Allocation
CVE-2026-58060		 CWE-789 Medium
No
No
 2.73.12 31.08.2026 SB2026083171
SB2026083172
SB20260831105
and 9 more
#VU146449 - Insufficient Verification of Data Authenticity
CVE-2026-58061		 CWE-345 Medium
No
No
 2.73.12 31.08.2026 SB2026083171
SB20260831105
SB2026091409
and 2 more


Showing elements 1 - 20 out of 35