Ultravioletrs vulnerabilities
We track 4 vulnerabilities in Ultravioletrs products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on November 5, 2026.
Latest Ultravioletrs vulnerabilities
- 7.2 High severity
cocos: Time-of-check Time-of-use (TOCTOU) Race Condition
Cocos AI is a confidential computing system for AI. Prior to 0.9.0, Cocos AI performs attestation only once when an attested TLS connection is established. An attacker who can modify the attester's workload code, memory-backed state, configuration, or attached
- 9.1 Critical severity
cocos: Origin Validation Error
Cocos AI is a confidential computing system for AI. In version 0.8.2 and earlier, Cocos AI accepts trusted execution environment attestation Evidence when firmware patch levels and software measurements match, without binding the Evidence to an allowed platfor
- 9.1 Critical severity
cocos: Origin Validation Error
Cocos AI is a confidential computing system for AI. In Cocos AI 0.8.2 and earlier, VerifyAttestationReportTLS in the AMD SEV-SNP verifier sets Policy.ReportData only when its caller supplies non-empty expected reportData. A relying-party integration that passe
- 9.1 Critical severity
cocos: Origin Validation Error
Cocos AI is a confidential computing system for AI. In Cocos AI 0.8.2 and earlier, VerifTeeAttestation in the Intel TDX aTLS verifier receives an expected current-session value but does not apply it to TdQuoteBodyPolicy.ReportData before validating TDX QuoteV4