Vveracrypt

Products

Exploited and recent CVEs

• CVE-2026-77372 High 8.8 VeraCrypt: Heap overflow and out-of-bounds read in Serializable deserialization (elevated Core service input path) <0.1%
• CVE-2026-77572 Low 3.3 VeraCrypt: Missing authorization on veracrypt.sys IOCTLs exposes disk topology, symlink targets, and DeviceObject reference count to any client of \\.\VeraCrypt <0.1%
• CVE-2026-54073 Medium 4.6 VeraCrypt: Hidden volume quick format weakens plausible deniability 0.1%
• CVE-2026-53762 Medium 6.2 VeraCryp: wolfCrypt backend bypasses VeraCrypt PBKDF2 iteration count (non-default WOLFCRYPT=1 builds) <0.1%