VendorsMongoDBlibmongocryptall versions
Vulnerabilities

MongoDB libmongocrypt

Ranked by severity, then by exploit likelihood, unless you sort otherwise. Click a CVE ID for its full record.

4CVEs
CVE-2026-106433
Heap corruption via duplicate masterKey fields in MongoDB libmongocrypt
Published 2026-10-08 · Analyzed
8.8EPSS 0.003
CVE-2026-84971
Persistent client crash loop via undersized FLE2 insert-update ciphertext in decryption path
Published 2026-09-03 · Analyzed
7.1EPSS 0.003
CVE-2026-84962
Authenticated KMS request forgery via CRLF injection in GCP key identifier strings
Published 2026-09-03 · Analyzed
5.7EPSS 0.002
CVE-2026-81523
Cross-tenant database retargeting via dot/NUL injection in namespace strings in libmongocrypt
Published 2026-08-27 · Analyzed
4.4EPSS 0.001