Advisories · Technology
ultravioletrs cocos.
Every CVE that names ultravioletrs cocos among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.1 CriticalCritical · CVSS 9+
Cocos Intra-handshake attested TLS implementation is vulnerable to Diversion Attacks
- ultravioletrs cocos
- CWE-346
- CVSS 7.2 High
Cocos AI Intra-handshake attested TLS implementation is vulnerable to TOCTOU Attacks
- ultravioletrs cocos
- Race condition
- CVSS 9.1 CriticalCritical · CVSS 9+
Cocos AI: Intra-handshake attested TLS implementation is vulnerable to session-misbinding attacks for Intel TDX verifier path
- ultravioletrs cocos
- CWE-346
- CWE-354
- CVSS 9.1 CriticalCritical · CVSS 9+
Cocos AI: Intra-handshake attested TLS implementation can accept Evidence with nil, empty, or omitted reportData in the AMD SEV-SNP path
- ultravioletrs cocos
- CWE-346
- CVSS 7.5 High
CoCoS attested TLS is vulnerable to relay attacks via extracted ephemeral TLS keys
- ultravioletrs cocos
- CWE-322
- CWE-346