PPrivasys

Products

Exploited and recent CVEs

• CVE-2026-108361 High 7.2 Privasys Intra-handshake attested TLS implementation is vulnerable to TOCTOU Attacks <0.1%
• CVE-2026-108362 Critical 9.1 Privasys attested TLS accepted evidence from any unrevoked TEE platform (diversion attack) 0.2%
• CVE-2026-108269 Critical 9.1 ra-tls-clients: RA-TLS challenge verifier accepted quotes not bound to the TLS session 0.1%
• CVE-2026-108268 Critical 9.1 enclave-os-virtual: RA-TLS challenge certificates were not bound to the TLS session 0.1%
• CVE-2026-108267 Critical 9.1 Privasys Go fork: RA-TLS challenge mode did not bind attestation evidence to the TLS session 0.1%
• CVE-2026-108266 Critical 9.1 Privasys rustls fork: RA-TLS challenge mode did not bind attestation evidence to the TLS session 0.1%
• CVE-2026-108265 Critical 9.1 enclave-os-mini: RA-TLS challenge certificates were not bound to the TLS session 0.1%