CWE-1240 · Cryptography
Use of a Cryptographic Primitive with a Risky Implementation
21CVEs
SortMost likely exploited
21 CVEs with CWE-1240 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2025-29808Windows Cryptographic Services Information Disclosure VulnerabilityMicrosoft · Windows Server 2022 · CVSS 5.5 · 2025-04-08 | 5.5 | 0.5% | 2025-04-08 |
| CVE-2024-0220B&R products use insufficient communication encryptionB&R Industrial Automation · Automation Studio · CVSS 8.3 · 2024-02-22 | 8.3 | 0.4% | 2024-02-22 |
| CVE-2025-24802Soundness issue with Plonky2 look up tables0xPolygonZero · plonky2 · CVSS 8.6 · 2025-01-30 | 8.6 | 0.3% | 2025-01-30 |
| CVE-2025-62514`libparsec_crypto` does not check for weak order point of curve 25519Scille · parsec-cloud · CVSS 8.3 · 2026-01-29 | 8.3 | 0.3% | 2026-01-29 |
| CVE-2025-53960Apache StreamPark: Uses the user’s password as the secret keyApache Software Foundation · Apache StreamPark · CVSS 5.9 · 2025-12-12 | 5.9 | 0.3% | 2025-12-12 |
| CVE-2026-50303Windows Key Guard Security Feature Bypass VulnerabilityMicrosoft · Windows 10 Version 1809 · CVSS 5.5 · 2026-07-14 | 5.5 | 0.3% | 2026-07-14 |
| CVE-2023-51392Silicon Labs EFR32xxx parts with classic key storage do not use hardware accelerated AES-CCMsilabs.com · Ember ZNet SDK · CVSS 6.2 · 2024-02-23 | 6.2 | 0.2% | 2024-02-23 |
| CVE-2025-22475Dell PowerProtect DD, versions prior to DDOS 8.3.0.0, 7.10.1.50, and 7.13.1.10 contains a use of a Cryptographic Primitive with a Risky Implementation vulnerability. A remote atta…Dell · PowerProtect DD · CVSS 3.7 · 2025-02-04 | 3.7 | 0.2% | 2025-02-04 |
| CVE-2024-0323FTP uses unsecure encryption mechanismsB&R Industrial Automation · Automation Runtime · CVSS 9.8 · 2024-02-05 | 9.8 | 0.2% | 2024-02-05 |
| CVE-2026-21751HCL Hive is affected by use of a cryptographic primitive with a risky implementationHCLSoftware · HCL Hive · CVSS 7.4 · 2026-08-24 | 7.4 | 0.2% | 2026-08-24 |
| CVE-2025-58720Windows Cryptographic Services Information Disclosure VulnerabilityMicrosoft · Windows 10 Version 1809 · CVSS 7.8 · 2025-10-14 | 7.8 | 0.2% | 2025-10-14 |
| CVE-2025-64647Multiple Vulnerabilities in IBM Concert SoftwareIBM · Concert · CVSS 5.9 · 2026-03-25 | 5.9 | 0.2% | 2026-03-25 |
| CVE-2025-68833HCL Hive is affected by use of a cryptographic primitive with a risky implementationHCLSoftware · HCL Hive · CVSS 5.3 · 2026-08-24 | 5.3 | 0.2% | 2026-08-24 |
| CVE-2025-29779Post-Quantum Secure Feldman's Verifiable Secret Sharing has Inadequate Fault Injection Countermeasures in `secure_redundant_execution`DavidOsipov · PostQuantum-Feldman-VSS · CVSS 5.4 · 2025-03-14 | 5.4 | 0.2% | 2025-03-14 |
| CVE-2025-14505Elliptic Cryptanalysis vulnerability when `k` has leading zerosElliptic · CVSS 5.6 · 2026-01-08 | 5.6 | 0.2% | 2026-01-08 |
| CVE-2026-27017uTLS has a Chrome Parrot Fingerprint Vulnerability due to GREASE ECH Cipher Suite Mismatchrefraction-networking · utls · CVSS 2.3 · 2026-02-20 | 2.3 | 0.2% | 2026-02-20 |
| CVE-2026-22705RustCrypto: Signatures has timing side-channel in ML-DSA decompositionRustCrypto · signatures · CVSS 6.4 · 2026-01-10 | 6.4 | 0.2% | 2026-01-10 |
| CVE-2026-44410Function Abusement Vulnerability in ZTE ZXUniPOS NDS-LTEZTE · ZXUniPOS NDS-LTE · CVSS 3.8 · 2026-05-26 | 3.8 | 0.1% | 2026-05-26 |
| CVE-2024-37137Dell Key Trust Platform, v3.0.6 and prior, contains Use of a Cryptographic Primitive with a Risky Implementation vulnerability. A local privileged attacker could potentially explo…Dell · CloudLink · CVSS 3.8 · 2024-06-28 | 3.8 | 0.1% | 2024-06-28 |
| CVE-2026-46654Plonky3 MultiField32Challenger: transcript malleability and challenge entropy lossPlonky3 · Plonky3 · CVSS 8.9 · 2026-06-10 | 8.9 | 0.1% | 2026-06-10 |
| CVE-2025-46424Dell CloudLink, versions prior to 8.2, contain use of a Cryptographic Primitive with a Risky Implementation vulnerability. A high privileged attacker could potentially exploit thi…Dell · CloudLink · CVSS 6.7 · 2025-11-05 | 6.7 | 0.1% | 2025-11-05 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.