{"vulnerability": "CVE-2026-8763", "sightings": [{"uuid": "4cb1cf76-b5a1-4293-a7f8-c33d43685e7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8763", "type": "seen", "source": "https://infosec.exchange/users/harrysintonen/statuses/117036528234088485", "content": "Bouncy Castle Java 1.85 has been released. It includes fixes to various rather significant vulnerabilities and weaknesses. Some highlights:\n- CVE-2026-8763 - Name Constraints bypass via trailing dot in rfc822Name and URI.- CVE-2026-12803 - KCCMBlockCipher MAC does not bind nonce when AAD is absent (cross-nonce AEAD forgery).- CVE-2026-12816 - IESEngine stream-mode MAC forgery via length-dependent KDF split.- CVE-2026-58061 - CCM-family modes write plaintext to caller buffer before tag check.- CVE-2026-58062 - Stapled OCSP response accepted without binding to the checked certificate.- CVE-2026-59639 - CMS verifySignatures returns true for SignedData with zero signers.\nhttps://www.bouncycastle.org/resources/new-release-bouncy-castle-java-1-85/\n#infosec #cybersecurity", "creation_timestamp": "2026-08-04T09:28:17.783121Z"}, {"uuid": "0b1a5861-2879-433d-b143-0ab4e4f25da6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-8763", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117030049213840403", "content": "CVE-2026-8763: CRITICAL vuln in Bouncy Castle BC-JAVA (<1.85, 2.73.0-2.73.11). Improper cert validation via trailing dot bypasses name constraints \u2014 risk of MITM attacks. No patch yet. Monitor vendor for updates. https://radar.offseq.com/threat/cve-2026-8763-cwe-295-improper-certificate-validation-in-legion-of-the-bouncy-castle-inc-bc-java-e499664fa1a18bc4 #OffSeq #BouncyCastle #Vuln #CVE20268763", "creation_timestamp": "2026-08-03T06:00:36.155601Z"}, {"uuid": "ec7ab09c-9ef3-432b-9f4d-8e25e7d5be5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-8763", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3ms5t2wluuw2j", "content": "BC-JAVA users: CVE-2026-8763 is a CRITICAL flaw in certificate validation (all <1.85, 2.73.0-2.73.11). Attackers can bypass name constraints \u2014 risk to TLS/SSL. No patch yet. Monitor vendor: https://radar.offseq.com/threat/cve-2026-8763-cwe-295-improper-certificate-validation-in-legion-of-the-boun...", "creation_timestamp": "2026-08-03T06:00:38.756314Z"}, {"uuid": "cc19807a-7da8-4014-b300-c00216eb3581", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8763", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3ms7f7omajm2h", "content": "CVE-2026-8763 - bouncycastle\nBouncy Castle for Java versions before 1.85, 2.73.12, and certain LTS and FIPS versions allow an attacker to bypass security restrictions by adding a trailing dot\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#bouncycastle #debian #Debian11 #CVE #infosec", "creation_timestamp": "2026-08-03T20:58:03.388388Z"}, {"uuid": "3b59a21f-2313-4461-bebf-29723e43dd1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8763", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mschhaefwv2l", "content": "CVE-2026-8763 - bouncycastle\nA security issue in Bouncy Castle for Java allows an attacker to bypass certain security restrictions. This affects versions of Bouncy Castle for Java\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#bouncycastle #canonical #UbuntuPro1604LTS #CVE #infosec", "creation_timestamp": "2026-08-05T02:16:04.663664Z"}, {"uuid": "b533f496-e26d-4783-8631-818c9a2d9bd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87634", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mv4yzg4t4t2f", "content": "CVE-2026-87634 - chrome\nGoogle Chrome versions earlier than 153 can be tricked by a specially crafted web page to run unwanted programs on the computer. This could let an attacker take actions outside the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#chrome #google #CVE #infosec", "creation_timestamp": "2026-09-10T02:30:04.510289Z"}, {"uuid": "db821296-f2c6-487d-b681-38879d9667f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87637", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mv4wrxnbwu2j", "content": "CVE-2026-87637 - chrome\nA flaw in how Chrome handled extensions on older Mac versions could let a hostile website run any program on the computer, bypassing Chrome's built\u2011in protection. This could let\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#chrome #google #CVE #infosec", "creation_timestamp": "2026-09-10T01:50:06.147887Z"}, {"uuid": "664b4a39-ea4d-43db-9322-3d86464a7808", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87638", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mv4xvpfgze25", "content": "CVE-2026-87638 - chrome\nA web page crafted by an attacker could cause older versions of Google Chrome to write data outside its safe area, potentially letting the attacker run code on the user's computer. This\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#chrome #google #CVE #infosec", "creation_timestamp": "2026-09-10T02:10:10.679936Z"}, {"uuid": "5f28c863-1529-43a7-8ffc-4f3027467e66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-87631", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260910", "content": "", "creation_timestamp": "2026-09-10T04:45:07.911368Z"}, {"uuid": "97bd1980-0af1-4180-acb2-1449fc8aa080", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-87632", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260910", "content": "", "creation_timestamp": "2026-09-10T04:45:10.112191Z"}, {"uuid": "56752137-485c-4bb9-8f4d-bb3089f96b53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-87633", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260910", "content": "", "creation_timestamp": "2026-09-10T04:45:12.286682Z"}, {"uuid": "be01028f-c8fa-4cc8-a6ac-b375adafe3eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-87634", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260910", "content": "", "creation_timestamp": "2026-09-10T04:45:14.467049Z"}, {"uuid": "ab114478-a0b2-43f5-b093-1bbd0df9d334", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-87635", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260910", "content": "", "creation_timestamp": "2026-09-10T04:45:16.663415Z"}, {"uuid": "6ea1b273-65af-465d-896c-653016160c15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-87636", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260910", "content": "", "creation_timestamp": "2026-09-10T04:45:18.853947Z"}, {"uuid": "8217a592-f30e-478e-b8bf-5e0de069ecf7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-87637", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260910", "content": "", "creation_timestamp": "2026-09-10T04:45:21.028573Z"}, {"uuid": "f37bbdb5-a785-4d6f-963b-82994c325ea3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-87638", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260910", "content": "", "creation_timestamp": "2026-09-10T04:45:23.237047Z"}, {"uuid": "5dc3b7fa-31c1-49fd-93b1-aed6cf938075", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-87639", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260910", "content": "", "creation_timestamp": "2026-09-10T04:45:25.424337Z"}, {"uuid": "4f6602e5-b597-43dd-b67a-b4e640e46411", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-87630", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260910", "content": "", "creation_timestamp": "2026-09-10T05:15:02.526499Z"}, {"uuid": "1bd03389-0c0c-454d-9ab3-354f3c70af36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87637", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mv5dhv4ho725", "content": "\ud83d\udccc CVE-2026-87637 - Use after free in Extensions in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox... https://www.cyberhub.blog/cves/CVE-2026-87637", "creation_timestamp": "2026-09-10T05:37:06.615737Z"}, {"uuid": "299b9d4c-d456-4dca-85ee-be51e8fc580b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87634", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mv5iisvxze2u", "content": "\ud83d\udccc CVE-2026-87634 - Use after free in WebPackaging in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the san... https://www.cyberhub.blog/cves/CVE-2026-87634", "creation_timestamp": "2026-09-10T07:07:07.229979Z"}, {"uuid": "ccaf231e-d883-441a-a92d-b4d5dfa5b7eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87636", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mv6xgtua4e2v", "content": "\ud83d\udccc CVE-2026-87636 - Type confusion in XML in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a... https://www.cyberhub.blog/cves/CVE-2026-87636", "creation_timestamp": "2026-09-10T21:07:06.549253Z"}]}