https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-39856.htmlhttps://patchthecve.com/cve/CVE-2026-39856.htmlMon, 26 Oct 2026 22:10:00 +0000MEDIUM 5.5: osslsigncode is a tool that implements Authenticode signing and timestamping. Prior to 2.13, an out-of-bounds read vulnerability exists in osslsigncode version 2.12 and earlier in the PE page-hash computation code (pe_page_hash_calc()). When processing PE sections for page hashing, the function useshttps://patchthecve.com/cve/CVE-2026-39855.htmlhttps://patchthecve.com/cve/CVE-2026-39855.htmlMon, 26 Oct 2026 22:10:00 +0000MEDIUM 5.5: osslsigncode is a tool that implements Authenticode signing and timestamping. Prior to 2.13, an integer underflow vulnerability exists in osslsigncode version 2.12 and earlier in the PE page-hash computation code (pe_page_hash_calc()). When page hash processing is performed on a PE file, the functiohttps://patchthecve.com/cve/CVE-2026-39853.htmlhttps://patchthecve.com/cve/CVE-2026-39853.htmlMon, 26 Oct 2026 21:10:00 +0000HIGH 7.8: osslsigncode is a tool that implements Authenticode signing and timestamping. Prior to 2.12, A stack buffer overflow vulnerability exists in osslsigncode in several signature verification paths. During verification of a PKCS#7 signature, the code copies the digest value from a parsed SpcIndirectData