Advisories · Technology
VeraCrypt.
Every CVE that names VeraCrypt among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.8 High
VeraCrypt: Heap overflow and out-of-bounds read in Serializable deserialization (elevated Core service input path)
- VeraCrypt
- Memory corruption
- CVSS 3.3 Low
VeraCrypt: Missing authorization on veracrypt.sys IOCTLs exposes disk topology, symlink targets, and DeviceObject reference count to any client of \\.\VeraCrypt
- VeraCrypt
- Information disclosure
- CVSS 4.6 Medium
VeraCrypt: Hidden volume quick format weakens plausible deniability
- VeraCrypt
- CWE-693
- CVSS 6.2 Medium
VeraCryp: wolfCrypt backend bypasses VeraCrypt PBKDF2 iteration count (non-default WOLFCRYPT=1 builds)
- VeraCrypt
- Weak cryptography or TLS