credential_provider_for_windows vulnerabilities

CVEs whose affected-version data names the credential_provider_for_windows package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-78628Medium· 6.0

2w ago

The Okta Credential Provider for Windows does not validate a serialized credential buffer before interpreting it as a Kerberos logon structure

The Okta Credential Provider for Windows does not validate a serialized credential buffer before interpreting it as a Kerberos logon structure. The buffer size and packed string offsets are not checked. Processing a malformed buffer can …

▾ SunlitOkta · Okta Credential Provider for WindowsEPSS 0.13%via NVD