Report: CVE-2026-4428 - CRL Distribution Point Scope Check Logic Error in AWS-LC

Report: CVE-2026-4428 - CRL Distribution Point Scope Check Logic Error in AWS-LC

CVE ID :CVE-2026-4428 Published : March 19, 2026, 9:17 p.m. | 28 minutes ago Description :A logic error in CRL distribution point validation in AWS-LC before 1.71.0 causes partitioned CRLs to be incorrectly rejected as out of scope, which allows a revoked certificate to bypass certificate revocation checks. To remediate this issue, users should upgrade to AWS-LC 1.71.0 or AWS-LC-FIPS-3.3.0. Severity: 9.1 | CRITICAL Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE Details

Severity
CRITICAL
Published
March 19, 2026
Affected Product: AWS