Idrix Veracrypt — known CVE vulnerabilities

Every CVE whose affected-product data names Idrix Veracrypt, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2015-7358 — CVSS 7.8 (high): The IsDriveLetterAvailable method in Driver/Ntdriver.c in TrueCrypt 7.0, VeraCrypt before 1.15, and CipherShed, when running on Windows…
• CVE-2015-7359 — CVSS 7.8 (high): The (1) IsVolumeAccessibleByCurrentUser and (2) MountDevice methods in Ntdriver.c in TrueCrypt 7.0, VeraCrypt before 1.15, and CipherShed…
• CVE-2016-1281 — CVSS 7.8 (high): Untrusted search path vulnerability in the installer for TrueCrypt 7.2 and 7.1a, VeraCrypt before 1.17-BETA, and possibly other products…
• CVE-2019-19501 — CVSS 7.8 (high): VeraCrypt 1.24 allows Local Privilege Escalation during execution of VeraCryptExpander.exe.
• CVE-2019-1010208 — CVSS 3.3 (low): IDRIX, Truecrypt Veracrypt, Truecrypt Prior to 1.23-Hotfix-1 (Veracrypt), all versions (Truecrypt) is affected by: Buffer Overflow. The…