Symcrypt
by Microsoft
Source repositories
CVEs (4)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-35199 | Med | 0.33 | 6.1 | 0.00 | Apr 6, 2026 | SymCrypt is the core cryptographic function library currently used by Windows. From 103.5.0 to before 103.11.0, The SymCryptXmssSign function passes a 64-bit leaf count value to a helper function that accepts a 32-bit parameter. For XMSS^MT parameter sets with total tree height… | ||
| CVE-2021-43228 | 0.01 | — | 0.04 | Dec 15, 2021 | SymCrypt Denial of Service Vulnerability | |||
| CVE-2019-0865 | 0.01 | — | 0.04 | Jul 15, 2019 | A denial of service vulnerability exists when SymCrypt improperly handles a specially crafted digital signature.An attacker could exploit the vulnerability by creating a specially crafted connection or message.The security update addresses the vulnerability by correcting the way… | |||
| CVE-2019-1171 | 0.00 | — | 0.01 | Aug 14, 2019 | An information disclosure vulnerability exists in SymCrypt during the OAEP decryption stage. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system. To exploit this vulnerability, an attacker would have to log… |
- risk 0.33cvss 6.1epss 0.00
SymCrypt is the core cryptographic function library currently used by Windows. From 103.5.0 to before 103.11.0, The SymCryptXmssSign function passes a 64-bit leaf count value to a helper function that accepts a 32-bit parameter. For XMSS^MT parameter sets with total tree height…
- CVE-2021-43228Dec 15, 2021risk 0.01cvss —epss 0.04
SymCrypt Denial of Service Vulnerability
- CVE-2019-0865Jul 15, 2019risk 0.01cvss —epss 0.04
A denial of service vulnerability exists when SymCrypt improperly handles a specially crafted digital signature.An attacker could exploit the vulnerability by creating a specially crafted connection or message.The security update addresses the vulnerability by correcting the way…
- CVE-2019-1171Aug 14, 2019risk 0.00cvss —epss 0.01
An information disclosure vulnerability exists in SymCrypt during the OAEP decryption stage. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system. To exploit this vulnerability, an attacker would have to log…