CWE-299

CWE-299 · 3 records · 1 with a public proof-of-concept

Records the NVD classes under CWE-299, highest CVSS first.

  1. MEDIUM 6.5CVE-2026-735812026-09-23

    Improper Check for Certificate Revocation vulnerability in Apache Tomcat. Both the OpenSSL and OpenSSL-FFM TLS implementations ignore CRLs when certificate uses a keystore. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.25, from 10.1.0-M1 thr…

    AI risk analysis on Exploit-DB.ai →

  2. MEDIUM 5.3CVE-2026-94417public PoC2026-09-27

    When an application enables both OCSP and CRL revocation checking on one WOLFSSL_CTX or certificate manager, wolfSSL skips the CRL check for any peer certificate that carries no Authority Information Access OCSP URL, and accepts a certificate the loaded CRL li…

    wolfssl

    AI risk analysis on Exploit-DB.ai →

  3. MEDIUM 4.4CVE-2026-1022212026-10-13

    No cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.

    AI risk analysis on Exploit-DB.ai →