Implementation of JOSE for C/C++
Security Fix(es):
OpenIDC/cjose is a C library implementing the Javascript Object Signing and Encryption (JOSE). Prior to version 0.6.2.5, cjose's JWE decryption path for the AES Key Wrap key-management algorithms (`alg` = `A128KW`, `A192KW`, `A256KW`) does not validate the length of the attacker-supplied `encrypted_key` (JWE Encrypted Key) before unwrapping it into a fixed-size, heap-allocated Content Encryption Key (CEK) buffer. A remote, unauthenticated attacker who can submit a crafted JWE to an application that decrypts it with an AES-KW symmetric key can trigger an out-of-bounds heap write, corrupting the heap. This leads at minimum to a crash (denial of service) and, depending on the heap layout and allocator, may be leverageable for further memory-corruption impact. `cjose_jwe_import()` / `cjose_jwe_decrypt()` are pre-authentication entry points: they parse and process fully attacker-controlled input. Upgrade to cjose 0.6.2.5 to receive a patch. If upgrading is not immediately possible, reject the AES Key Wrap algorithms (`A128KW`/`A192KW`/`A256KW`) for untrusted JWEs at the application layer.(CVE-2026-53938)
OpenIDC/cjose is a C library implementing the Javascript Object Signing and Encryption (JOSE). In versions 0.6.1 through 0.6.2.5, when cjose encrypts a JWE using an AES-CBC-HMAC content-encryption algorithm (`A128CBC-HS256`, `A192CBC-HS384`, or `A256CBC-HS512`) together with any key-management algorithm that generates a fresh content-encryption key (CEK), the CEK is all zero bytes instead of being randomly generated. The resulting JWE is therefore encrypted and authenticated under a fixed, publicly known key, so anyone who obtains the JWE can recover the plaintext and forge or modify the content. This is fixed in version 0.6.2.6 by `_cjose_jwe_set_cek_aes_cbc()` generating the CEK from `RAND_bytes`. A regression test asserts that the `encrypted_key` differs across two encryptions for each AES-CBC-HMAC variant. Until upgrading, for data encrypted with cjose, three options are available. Use an AES-GCM `enc` (`A128GCM` / `A192GCM` / `A256GCM`) instead of an AES-CBC-HMAC `enc`, use `alg=dir` with a caller-supplied CEK, or avoid using cjose for JWE encryption with the affected algorithm pair. These are mitigations for new ciphertexts only; data already encrypted under the zero key remains compromised and should be re-encrypted (and any secrets it contained rotated).(CVE-2026-53939)
Adobe Acrobat contains a heap-based buffer overflow vulnerability that may allow an attacker to disclose sensitive memory information. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability affects versions up to 26.002.21900 and 24.001.30383. The issue has a medium severity rating with a CVSS score of 5.5.
Acrobat Reader is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Adobe Photoshop 2026 contains a heap-based buffer overflow vulnerability that may allow an attacker to execute arbitrary code with the privileges of the current user. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability affects versions up to and including 27.6 and 26.11.6. The issue has a high severity rating with a CVSS score of 7.8.
CVE-2026-84000 is a heap-based buffer overflow vulnerability in the Microsoft Graphics Component affecting multiple versions of Microsoft Windows 10, including Version 1607 and later builds. An authorized local attacker can exploit this flaw to execute arbitrary code with elevated privileges. The vulnerability has a high severity rating with a CVSS score of 7.8. Official patches have been released by Microsoft to address this issue.
CVE-2026-83995 is a heap-based buffer overflow vulnerability in the NTFS component of Microsoft Windows 10 Version 1607 and related versions. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has been assigned a high severity rating with a CVSS score of 7.8. Microsoft has released official fixes for all affected versions.
CVE-2026-83992 is a heap-based buffer overflow vulnerability in the Windows Imaging Component of Microsoft Windows 10 Version 1607 and related builds. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability has a high severity with a CVSS score of 8.8. Microsoft has released official fixes for affected versions.
CVE-2026-83985 is a heap-based buffer overflow vulnerability in the Windows Biometric Service on Microsoft Windows 10 Version 1607 and later builds. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity score of 7.8 and has been officially fixed in multiple Windows 10 builds.
CVE-2026-83983 is a heap-based buffer overflow vulnerability in the Windows Biometric Service on Windows 10 Version 1607 and related builds. It allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity score of 7.8 and has been officially fixed in multiple Windows 10 builds.
CVE-2026-83987 is a heap-based buffer overflow vulnerability in the Windows Biometric Service on Microsoft Windows 10 Version 1607 and later versions. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has been assigned a high severity with a CVSS score of 7.8. Microsoft has released official fixes for all affected versions.
CVE-2026-83980 is a heap-based buffer overflow vulnerability in the Windows Biometric Service on Windows 10 Version 1607 and later builds. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity with a CVSS score of 7.8. Microsoft has released official fixes for all affected versions.
CVE-2026-83982 is a heap-based buffer overflow vulnerability in the Windows Biometric Service on Windows 10 Version 1607 and later builds. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has a high severity rating and affects multiple specific Windows 10 builds prior to their respective fixed versions. Microsoft has released official fixes for all affected versions.
CVE-2026-83978 is a heap-based buffer overflow vulnerability in the Windows Biometric Service on Microsoft Windows 10 Version 1607 and later builds. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity score of 7.8 and affects multiple Windows 10 versions prior to specific fixed builds. Microsoft has released official patches to address this issue.
CVE-2026-83977 is a heap-based buffer overflow vulnerability in the Windows Biometric Service on Microsoft Windows 10 Version 1607 and related builds. It allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity with a CVSS score of 7.8. Official patches have been released for multiple affected Windows 10 builds.
CVE-2026-83981 is a heap-based buffer overflow vulnerability in the Windows Biometric Service on Microsoft Windows 10 Version 1607 and later builds. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has been assigned a high severity with a CVSS score of 7.8. Official fixes have been released for all affected versions.
CVE-2026-83973 is a heap-based buffer overflow vulnerability in the Windows Biometric Service on Microsoft Windows 10 Version 1607 and related builds. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has a high severity score of 7.8 and has been officially fixed in multiple Windows 10 builds.
CVE-2026-83972 is a heap-based buffer overflow vulnerability in the Windows Biometric Service on Microsoft Windows 10 Version 1607 and later builds. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has a high severity rating with a CVSS score of 7.8. Official patches have been released by Microsoft to address this issue in multiple Windows 10 builds.
CVE-2026-83970 is a heap-based buffer overflow vulnerability in the Windows Biometric Service on Microsoft Windows 10 Version 1607 and related builds. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has a high severity rating with a CVSS score of 7.8. Microsoft has issued official fixes for affected versions.
CVE-2026-83967 is a heap-based buffer overflow vulnerability in the Windows Biometric Service on Microsoft Windows 10 Version 1607 and later builds. This flaw allows an authorized local attacker to elevate privileges. The vulnerability affects multiple Windows 10 builds prior to specific fixed versions. Microsoft has released official fixes for all affected versions.
CVE-2026-83954 is a heap-based buffer overflow vulnerability in the Windows Biometric Service of Microsoft Windows 10 Version 1607 and later builds. This flaw allows an authorized local attacker to elevate privileges. The vulnerability has a high severity rating and has been officially fixed in multiple Windows 10 builds.