CWE-299

CVEs per yearBy the year they were published

1. 20202
2. 20231
3. 20254
4. 202615

Newest CVEs

• CVE-2026-118696

  In JetBrains IntelliJ IDEA, PyCharm, PhpStorm, RubyMine and WebStorm before 2026.3, 2026.2.4, 2026.1.5.1, and 2025.3.6.2; GoLand before 2026.3, 2026.2.4,…

  JetBrains · IntelliJ IDEA

  High8.0
• CVE-2026-115557

  Distrust compromised intermediate certificates in ssl module

  Python Software Foundation · CPython

  Critical9.4
• CVE-2026-115570

  Electron: Mitigation for compromised eMudhra intermediate certificates

  electron · electron

  High7.4
• CVE-2026-111943

  Distrust compromised intermediate certificates in crypto/x509

  Go standard library · crypto/x509

  Medium6.8
• CVE-2026-102221

  Secure Boot Security Feature Bypass Vulnerability

  Microsoft · Windows 10 Version 1607

  Medium4.4
• CVE-2026-94417

  CRL check skipped when OCSP enabled and certificate has no OCSP URL

  wolfSSL · wolfSSL

  Low2.3
• CVE-2026-73581

  Apache Tomcat: OpenSSL and OpenSSL-FFM TLS implementations ignore CRLs when certificate uses a keystore

  Apache Software Foundation · Apache Tomcat

  Medium6.5
• CVE-2026-93602

  rustls-webpki before 0.103.10 CRL Revocation Check Bypass

  rustls · webpki

  Medium5.9
• CVE-2026-93493

  Io.netty/netty-handler-ssl-ocsp: netty: ocsp validation silently skipped when a response omits the optional nextupdate field

  Red Hat · Red Hat build of Apache Camel for Spring Boot 4

  Medium5.9
• CVE-2026-86231

  mwiede jsch KnownHosts.java getRevokedKeys improper check for certificate revocation

  mwiede · jsch

  Medium6.3

Vendors it comes up for most

1. AWS1
2. Apache Software Foundation1
3. Dell1
4. Go standard library1
5. IBM1
6. JetBrains1
7. Juniper Networks1
8. Microsoft1
9. MongoDB Inc1
10. Philips1