cwe-295
Safeguard articles tagged "cwe-295" — guides, analysis, and best practices for software supply chain and application security.
5 articles
CVE-2020-0601: Microsoft Windows CryptoAPI Spoofing Vulnerability
CVE-2020-0601 affects Microsoft Windows and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2021-11-03.
CVE-2022-26923: Microsoft Active Directory Domain Services Privilege Escalation Vulnerability
CVE-2022-26923 affects Microsoft Active Directory and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2022-08-18.
CVE-2023-20963: Android Framework Privilege Escalation Vulnerability
CVE-2023-20963 affects Android Framework and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2023-04-13.
CVE-2023-41991: Apple Multiple Products Improper Certificate Validation Vulnerability
CVE-2023-41991 affects Apple Multiple Products and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2023-09-25.
urllib3 CA certificate verification bypass (CVE-2019-11324)
CVE-2019-11324 let urllib3 silently trust unintended CAs during custom certificate validation, undermining pinned-trust and mTLS setups.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.