@stackflag.bsky.socialCVE-2026-108269 - ra-tls-clients
Versions of privasys RA‑TLS client before 0.5.0 could be fooled into accepting a connection that isn’t the genuine secure enclave if an attacker steals the enclave’s TLS private key.…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-108268 - enclave-os-virtual
The Enclave OS Virtual software that runs container workloads in secure virtual machines could be tricked into accepting a fake proof of its identity if an attacker steals its…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-108267 - go
The Privasys Go software, which adds special security checks to Go’s TLS library, did not link the proof of a secure enclave to the actual network session in versions before v0.5.1-go1.26.5.…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-108266 - rustls
The privasys rustls library, used to secure communications, could allow a stolen private key to be used on a different connection, making it appear as a trusted enclave. This could…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-108265 - enclave-os-mini
Enclave OS Mini runs confidential code inside Intel SGX. If an attacker gets the TLS private key, they can reuse a trusted quote on a different connection, making a server think it…
Too many irrelevant or confusing CVEs? Use stackflag.com