Vulnerabilities > Cryptopro

DATE CVE VULNERABILITY TITLE RISK
2020-10-23 CVE-2020-9361 Improper Input Validation vulnerability in Cryptopro CSP 5.0.0.10004
CryptoPro CSP through 5.0.0.10004 on 64-bit platforms allows local users with the SeChangeNotifyPrivilege right to cause denial of service because user-mode input is mishandled during process creation.
local
low complexity
cryptopro CWE-20
2.1
2020-10-23 CVE-2020-9331 Improper Privilege Management vulnerability in Cryptopro CSP
CryptoPro CSP through 5.0.0.10004 on 32-bit platforms allows Local Privilege Escalation (by local users with the SeChangeNotifyPrivilege right) because user-mode input is mishandled during process creation.
local
low complexity
cryptopro CWE-269
4.6