Thalesgroup vulnerabilities
We track 7 vulnerabilities in Thalesgroup products across 7 products. 7 are rated high or critical, and none are known to be exploited. The most recent was published on November 5, 2026.
Latest Thalesgroup vulnerabilities
- 7.0 High severity
Safenet Authentication Client SIS token engine: Stack-based Buffer Overflow
A stack-based buffer overflow in Thales SafeNet Authentication Client (SAC) SIS token engine processing can be triggered by a malicious physical or software-emulated smart card. The issue can occur before authentication or PIN entry and may cause a denial of s
- 7.3 High severity
Safenet Authentication Client Service: Heap-based Buffer Overflow
A local privilege escalation vulnerability in Thales SafeNet Authentication Client (SAC) SACSrv can allow an authenticated, non-administrator local user to trigger a heap-based buffer overflow through the service interface. Successful exploitation may allow ar
- 9.8 Critical severity
Sentinel Keys Server: Stack-based Buffer Overflow
Stack-based buffer overflow and missing authorization vulnerability in Thales Sentinel Keys Server on Windows allows Overflow Buffers. Sentinel Keys Server does not check the length of the first field in the HTTP request. An attacker may craft an HTTP request
- 7.8 High severity
Sentinel Keys Server: Stack-based Buffer Overflow
Stack-based buffer overflow and out-of-bounds write vulnerability in Thales Sentinel Keys Server on Windows allows Overflow Buffers. Sentinel Keys Server does not check the length of the first field in the input message. A local attacker may craft an input and
- 7.5 High severity
Cryptobox: Improper Handling of Insufficient Permissions or Privileges
Vulnerability on the external sharing feature in Cryptobox allows an attacker knowing a sharing link URL to retrieve information from the server allowing an offline brute-force attack of the access code associated to this sharing link.
- 7.8 High severity
Sentinel HASP LDK: Improper Privilege Management
A flaw in the installer for Thales SafeNet Sentinel HASP LDK prior to 9.16 on Windows allows an attacker to escalate their privilege level via local access.
- 7.8 High severity
SafeNet Authentication Client: Improper Privilege Management
A flaw in the Windows Installer in Thales SafeNet Authentication Client prior to 10.8 R10 on Windows allows an attacker to escalate their privilege level via local access.