Skip to content
Openssl vulnerabilities
Newest
-
openssl
QUIC STREAM Fragment Metadata DoS
CVE-2026-54873
Fix available
7.5 High
-
openssl
Potential CPU DoS via O(n^2) Fragment Reassembly in QUIC
CVE-2026-42772
Fix available
5.3 Medium
-
openssl
QUIC: Unbounded RETIRE_CONNECTION_ID Backlog
CVE-2026-84784
Fix available
7.5 High
-
openssl
Timing Side-Channel in SM2 Signature Generation
CVE-2026-77696
Fix available
3.7 Low
-
openssl
Unauthenticated and Undersized DTLS 1.2 AEAD Record Causes DoS
CVE-2026-75806
Fix available
5.3 Medium
-
openssl
NULL Pointer Dereference in CMP Client Revocation Response Handling
CVE-2026-75805
Fix available
5.3 Medium
-
openssl
QUIC Connection-Level Flow Control is Not Enforced for Streams
CVE-2026-75804
Fix available
5.3 Medium
-
openssl
Out-of-Bounds Access After SSL_set_SSL_CTX() During a Handshake
CVE-2026-72897
Fix available
7.5 High
-
openssl
Non-Constant-Time SM2 Scalar Multiplication on ARM64 and RISC-V
CVE-2026-54875
Fix available
3.7 Low
-
openssl
Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves
CVE-2026-54872
Fix available
3.7 Low
-
openssl
QUIC Unvalidated Amplification Credit may be Over Accounted
CVE-2026-35191
Fix available
3.7 Low
-
openssl
Excessive Memory Allocation in Relative CRLDP Processing
CVE-2026-35189
Fix available
5.3 Medium
-
openssl
DTLS Retransmits Handshake Messages From a Stale Buffer Offset
CVE-2026-84782
Fix available
8.2 High
-
openssl
Use-After-Free in X.509 Extension Cache Under Concurrent Use
CVE-2026-84783
Fix available
7.5 High
-
openssl
Invalid Pointer Dereference in CMP Server via Crafted protectionAlg
CVE-2026-63076
Fix available
7.5 High
-
openssl
QUIC ACK-only Packet Retention Can Cause Memory Exhaustion
CVE-2026-63075
Fix available
7.5 High
-
openssl
CMP Indefinite Cache Growth of ExtraCerts
CVE-2026-63074
Fix available
5.9 Medium
-
openssl
Untrusted Sender DN Used as Format String in CMP Response Validation
CVE-2026-63073
Fix available
9.8 Critical
-
openssl
Heap Buffer Overflow in CMS Key Unwrapping
CVE-2026-63072
Public exploitFix available
7.5 High
-
openssl
Excessive Memory Use Buffering DTLS Records for a Future Epoch
CVE-2026-54874
Fix available
7.5 High
-
openssl
QUIC Server May Trigger Double Free When Processing INITIAL Packet
CVE-2026-18798
Fix available
7.5 High
-
openssl
RPK Server Signature Algorithm Selection Can Dereference a Missing Certificate
CVE-2026-14457
Fix available
7.5 High
-
openssl
AEAD Forgeries with Empty Ciphertext When Using EVP_Cipher()
CVE-2026-75803
Fix available
9.1 Critical
-
openssl
Unbounded Memory Growth in QUIC Server Incoming Channel Queue
CVE-2026-14456
Fix available
7.5 High
-
openssl
Client-Side Memory Leak in OCSP Response Checking
CVE-2026-54876
Fix available
7.5 High
-
openssl
Out-of-Bounds Read in CMS Password-Based Decryption
CVE-2026-9076
Fix available
7.5 High
-
openssl
Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion
CVE-2026-7383
Fix available
8.1 High
-
openssl, red hat cost management 4, multicluster engine for kubernetes +23 more +25 more
Heap Use-After-Free in the PKCS7_verify() Function
CVE-2026-45447
Public exploitFix available
8.8 High
-
openssl
Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes
CVE-2026-45446
Fix available
4.8 Medium
-
openssl
AES-OCB IV Ignored on EVP_Cipher() Path
CVE-2026-45445
Fix available
7.5 High
-
openssl
Possible Out of Bounds Read in X509_VERIFY_PARAM_set1_email()
CVE-2026-42771
Fix available
6.2 Medium
-
openssl
FFC-DH Peer Validation Uses Attacker-Supplied q
CVE-2026-42770
Fix available
3.7 Low
-
openssl
Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate
CVE-2026-42769
Fix available
5.3 Medium
-
openssl
Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt()
CVE-2026-42768
Fix available
3.7 Low
-
openssl
NULL Pointer Dereference in CRMF EncryptedValue Decryption
CVE-2026-42767
Fix available
5.9 Medium
-
openssl
Possible NULL Dereference in Password-Based CMS Decryption
CVE-2026-42766
Fix available
5.9 Medium
-
openssl
NULL Dereference in Certificate Verification with OCSP Checking
CVE-2026-42765
Fix available
7.5 High
-
openssl
NULL Pointer Dereference in QUIC Server Initial Packet Handling
CVE-2026-42764
Fix available
7.5 High
-
openssl
Double-free When Checking OCSP Stapled Response
CVE-2026-35188
Fix available
5.0 Medium
-
openssl
Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler
CVE-2026-34183
Fix available
7.5 High
-
openssl
CMS AuthEnvelopedData Processing May Accept Forged Messages
CVE-2026-34182
Fix available
9.1 Critical
-
openssl
PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys
CVE-2026-34181
Fix available
7.4 High
-
openssl
Heap Buffer Over-read in ASN.1 Content Parsing
CVE-2026-34180
Fix available
7.5 High
-
openssl
Out-of-bounds Read in AES-CFB-128 on X86-64 with AVX-512 Support
CVE-2026-28386
Fix available
7.5 High
-
openssl, siemens simatic cn 4100 +1 more
Incorrect Failure Handling in RSA KEM RSASVE Encapsulation
CVE-2026-31790
Fix available
7.5 High
-
openssl, siemens simatic cn 4100 +1 more
Heap Buffer Overflow in Hexadecimal Conversion
CVE-2026-31789
Fix available
9.8 Critical
-
openssl, siemens simatic cn 4100, simatic s7-1500 tm mfp - gnu/linux subsystem +2 more
Possible NULL Dereference When Processing CMS KeyTransportRecipientInfo
CVE-2026-28390
Fix available
7.5 High
-
openssl, siemens simatic cn 4100, simatic s7-1500 tm mfp - gnu/linux subsystem +2 more
Possible NULL Dereference When Processing CMS KeyAgreeRecipientInfo
CVE-2026-28389
Fix available
7.5 High
-
openssl, siemens simatic cn 4100, simatic s7-1500 tm mfp - gnu/linux subsystem +2 more
NULL Pointer Dereference When Processing a Delta CRL
CVE-2026-28388
Fix available
7.5 High
-
openssl, siemens simatic cn 4100, simatic s7-1500 tm mfp - gnu/linux subsystem +2 more
Potential Use-after-free in DANE Client Code
CVE-2026-28387
Fix available
8.1 High
- Show olderLoading…