Known vulnerabilities in Bouncy Castle for Java LTS - page 2

Vendor: Legion of the Bouncy Castle Inc.
Software: Bouncy Castle for Java LTS
Software CPE: cpe:2.3:a:legion_of_the_bouncy_castle:bc-lts:*:*:*:*:*:*:*:*
Website: https://www.bouncycastle.org/
Total vulnerabilities: 35
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Bouncy Castle for Java LTS Bouncy Castle for Java LTS is affected by 35 known vulnerabilities: 1 high, 34 medium Critical High Medium Low

Vulnerabilities (35)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU146452 - Improper Validation of Certificate with Host Mismatch
CVE-2026-59638		 CWE-297 Medium
No
No
 2.73.12 31.08.2026 SB2026083171
SB20260831105
SB2026091409
#VU146456 - Insufficient Verification of Data Authenticity
CVE-2026-59642		 CWE-345 Medium
No
No
 2.73.12 31.08.2026 SB2026083171
SB2026083172
SB20260831105
and 7 more
#VU146457 - Protection Mechanism Failure
CVE-2026-59643		 CWE-693 Medium
No
No
 2.73.12 31.08.2026 SB2026083171
SB20260831105
SB2026091416
#VU146458 - Resource exhaustion
CVE-2026-59644		 CWE-400 Medium
No
No
 2.73.12 31.08.2026 SB2026083171
SB20260831105
#VU146459 - Uncontrolled Recursion
CVE-2026-59645		 CWE-674 Medium
No
No
 2.73.12 31.08.2026 SB2026083171
SB20260831105
SB2026091409
and 4 more
#VU146460 - Uncontrolled Memory Allocation
CVE-2026-59646		 CWE-789 Medium
No
No
 2.73.12 31.08.2026 SB2026083171
SB20260831105
SB2026091409
#VU146461 - Resource exhaustion
CVE-2026-59647		 CWE-400 Medium
No
No
 2.73.12 31.08.2026 SB2026083171
SB20260831105
SB2026091409
and 2 more
#VU146462 - Resource exhaustion
CVE-2026-59648		 CWE-400 Medium
No
No
 2.73.12 31.08.2026 SB2026083171
SB20260831105
SB2026090816
and 4 more
#VU146463 - Uncontrolled Memory Allocation
CVE-2026-59649		 CWE-789 Medium
No
No
 2.73.12 31.08.2026 SB2026083171
SB20260831105
SB2026090816
and 1 more
#VU146464 - Improper input validation
CVE-2026-59650		 CWE-20 Medium
No
No
 2.73.12 31.08.2026 SB2026083171
SB20260831105
SB2026091409
and 6 more
#VU146465 - Inadequate Encryption Strength
CVE-2026-59651		 CWE-326 Medium
No
No
 2.73.12 31.08.2026 SB2026083171
SB20260831105
SB2026091409
and 3 more
#VU146466 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
CVE-2026-59652		 CWE-90 Medium
No
No
 2.73.12 31.08.2026 SB2026083171
SB20260831105
SB2026091409
and 3 more
#VU132272 - Inconsistency Between Implementation and Documented Design
CVE-2026-8149		 CWE-1068 Medium
No
No
 2.73.11 25.05.2026 SB2026052535
SB2026081477
SB2026082620
and 1 more
#VU132271 - Resource exhaustion
CVE-2025-12194		 CWE-400 Medium
No
No
 2.73.7 25.05.2026 SB2026052534
#VU132270 - Resource exhaustion
CVE-2025-9341		 CWE-400 Medium
No
No
 2.73.8 25.05.2026 SB2026052534


Showing elements 21 - 40 out of 35