@stackflag.bsky.socialCVE-2026-108362 - ra-tls-clients
The Privasys Remote Attestation TLS client library (versions before 0.11.0) will accept proof from any trusted secure enclave without checking that the enclave is the specific one…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-108269 - ra-tls-clients
Versions of privasys RA‑TLS client before 0.5.0 could be fooled into accepting a connection that isn’t the genuine secure enclave if an attacker steals the enclave’s TLS private key.…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-108268 - enclave-os-virtual
The Enclave OS Virtual software that runs container workloads in secure virtual machines could be tricked into accepting a fake proof of its identity if an attacker steals its…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-108267 - go
The Privasys Go software, which adds special security checks to Go’s TLS library, did not link the proof of a secure enclave to the actual network session in versions before v0.5.1-go1.26.5.…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-108266 - rustls
The privasys rustls library, used to secure communications, could allow a stolen private key to be used on a different connection, making it appear as a trusted enclave. This could…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-108265 - enclave-os-mini
Enclave OS Mini runs confidential code inside Intel SGX. If an attacker gets the TLS private key, they can reuse a trusted quote on a different connection, making a server think it…
Too many irrelevant or confusing CVEs? Use stackflag.com