← Back

Truecrypt

truecrypt

Vendor: Truecrypt • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2015-7359
3Ciphershed
IdrixTruecrypt
3Ciphershed
TruecryptVeracrypt
May 13, 2026
Oct 3, 2017
N/A· v4
7.8 HIGH· v3
4.6 MEDIUM· v2
The (1) IsVolumeAccessibleByCurrentUser and (2) MountDevice methods in Ntdriver.c in TrueCrypt 7.0, VeraCrypt before 1.15, and CipherShed, when running on Windows, do not check the impersonation level of impersonation to...Show more
The (1) IsVolumeAccessibleByCurrentUser and (2) MountDevice methods in Ntdriver.c in TrueCrypt 7.0, VeraCrypt before 1.15, and CipherShed, when running on Windows, do not check the impersonation level of impersonation tokens, which allows local users to impersonate a user at SecurityIdentify level and gain access to other users' mounted encrypted volumes.Show less
CVE-2015-7358
3Ciphershed
IdrixTruecrypt
3Ciphershed
TruecryptVeracrypt
May 13, 2026
Oct 3, 2017
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
The IsDriveLetterAvailable method in Driver/Ntdriver.c in TrueCrypt 7.0, VeraCrypt before 1.15, and CipherShed, when running on Windows, does not properly validate drive letter symbolic links, which allows local users to...Show more
The IsDriveLetterAvailable method in Driver/Ntdriver.c in TrueCrypt 7.0, VeraCrypt before 1.15, and CipherShed, when running on Windows, does not properly validate drive letter symbolic links, which allows local users to mount an encrypted volume over an existing drive letter and gain privileges via an entry in the /GLOBAL?? directory.Show less