Microsoft Research JavaScript Cryptography Library vulnerabilities

2 CVEs affecting Microsoft Research JavaScript Cryptography Library, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-1026, published 2020-04-15.

More from Microsoft.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2018-8319, published 2018-07-11. Critical severity, CVSS 9.8. EPSS: 7.7% chance of exploitation in the next 30 days. A Security Feature Bypass vulnerability exists in MSR JavaScript Cryptography Library that is caused by incorrect arithmetic computations, aka "MSR JavaScript Cryptography Library Security Feature…
• CVE-2020-1026, published 2020-04-15. Critical severity, CVSS 9.8. EPSS: 2.6% chance of exploitation in the next 30 days. A Security Feature Bypass vulnerability exists in the MSR JavaScript Cryptography Library that is caused by multiple bugs in the library’s Elliptic Curve Cryptography (ECC) implementation.An…