Skip to content

Product

Microsoft research javascript cryptography library vulnerabilities

2 published CVES affecting Microsoft research javascript cryptography library, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
2
High
0
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest Microsoft research javascript cryptography library CVEs

Newest publication first

  1. CVE-2020-1026 Incorrect Calculation in the MSR JavaScript Cryptography Library

    Published
    CriticalCVSS 9.8 EPSS 2.6%

    A Security Feature Bypass vulnerability exists in the MSR JavaScript Cryptography Library that is caused by multiple bugs in the library’s Elliptic Curve Cryptography (ECC) implementation.An attacker could potentially abuse these bugs to learn information about a server’s pri...

  2. CVE-2018-8319 Sensitive Data Exposure in msrcrypto

    Published
    CriticalCVSS 9.8 EPSS 7.7%

    A Security Feature Bypass vulnerability exists in MSR JavaScript Cryptography Library that is caused by incorrect arithmetic computations, aka "MSR JavaScript Cryptography Library Security Feature Bypass Vulnerability." This affects Microsoft Research JavaScript Cryptography Libr...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.