https://vulnogram.org/ Most recent CVEs assigned by OpenSSL Software Foundation (openssl). https://vulnogram.org/seaview/icons/openssl.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:06 GMT https://vulnogram.org/CVE-2026-84784 https://vulnogram.org/CVE-2026-84784 Issue summary: A malicious remote peer may flood the local QUIC stack with NEW_CONNECTION_ID frames by avoiding a limit check on how many connection IDs the remote QUIC stack can use. Impact summary: The local QUIC stack sends a RETIRE_CONN_ID frame… High Network Exploitable Tue, 29 Sep 2026 15:32:25 GMT https://vulnogram.org/CVE-2026-84783 https://vulnogram.org/CVE-2026-84783 Issue summary: The first concurrent use of the same X.509 certificate by several threads may cause its cached extension data to be freed while another thread is still using it. Impact summary: A remote, unauthenticated peer could crash a multi-thread… High Network Exploitable Tue, 29 Sep 2026 15:32:24 GMT https://vulnogram.org/CVE-2026-84782 https://vulnogram.org/CVE-2026-84782 Issue summary: The DTLS retransmission logic does not correctly handle a handshake message write that is suspended part-way through. The retransmitted message can be read past the message buffer and the retransmission overwrites the internal state th… High Network Exploitable Tue, 29 Sep 2026 15:32:23 GMT https://vulnogram.org/CVE-2026-77696 https://vulnogram.org/CVE-2026-77696 Issue summary: SM2 signature generation uses non-constant-time arithmetic on secret values, forming a timing side-channel. Impact summary: An attacker able to measure SM2 signing times may learn information about the per-signature secret nonce, which… Low Network Exploitable Tue, 29 Sep 2026 15:32:22 GMT https://vulnogram.org/CVE-2026-75806 https://vulnogram.org/CVE-2026-75806 Issue summary: An established DTLS 1.2 association using an AEAD cipher suite can be terminated by a single unauthenticated datagram whose encrypted fragment is shorter than the mandatory explicit IV and authentication tag overhead. Impact summary: A… Medium Network Exploitable Tue, 29 Sep 2026 15:32:21 GMT https://vulnogram.org/CVE-2026-75805 https://vulnogram.org/CVE-2026-75805 Issue summary: A CMP client that requests certificate revocation on the basis of a PKCS#10 CSR may dereference a NULL pointer and terminate abnormally when processing a crafted revocation response. Impact summary: The NULL pointer dereference happens… Medium Network Exploitable Tue, 29 Sep 2026 15:32:20 GMT https://vulnogram.org/CVE-2026-75804 https://vulnogram.org/CVE-2026-75804 Issue summary: OpenSSL QUIC stack does not enforce connection level flow control for streams. Remote peers may send more bytes as long as they fit within the stream flow control limits. Impact summary: A malicious remote peer may exploit the lack of… Medium Network Exploitable Tue, 29 Sep 2026 15:32:19 GMT https://vulnogram.org/CVE-2026-72897 https://vulnogram.org/CVE-2026-72897 Issue summary: A TLS server that calls SSL_set_SSL_CTX() to switch a connection to a different SSL_CTX part way through a handshake may access memory beyond the end of an internal array if the replacement context knows about more provider signature a… High Network Exploitable Tue, 29 Sep 2026 15:32:18 GMT https://vulnogram.org/CVE-2026-54875 https://vulnogram.org/CVE-2026-54875 Issue summary: A non-constant-time optimized implementation of scalar point multiplication is used for SM2 private key operations on ARM64 and RISC-V platforms. Impact summary: An attacker able to measure the time taken by, or to observe the cache-li… Low Network Exploitable Tue, 29 Sep 2026 15:32:17 GMT https://vulnogram.org/CVE-2026-54873 https://vulnogram.org/CVE-2026-54873 Issue summary: QUIC process may keep memory for QUIC packet buffer for much longer period than necessary. Impact summary: Remote peer can exploit this vulnerability by sending maliciously crafted packets, making the local QUIC stack to keep the memor… High Network Exploitable Tue, 29 Sep 2026 15:32:16 GMT https://vulnogram.org/CVE-2026-54872 https://vulnogram.org/CVE-2026-54872 Issue summary: The generic elliptic-curve scalar multiplication used for ECDSA and SM2 signature operations with curves that do not have a dedicated implementation leaks information about the secret nonce through timing. Impact summary: An attacker a… Low Network Exploitable Tue, 29 Sep 2026 15:32:15 GMT https://vulnogram.org/CVE-2026-42772 https://vulnogram.org/CVE-2026-42772 Issue summary: The QUIC stream reassembly algorithm performance deteriorates progressively as packets are arriving out of order. The worst case has a quadratic complexity proportional to the number of stream frames kept in the buffer for the received… Medium Network Exploitable Tue, 29 Sep 2026 15:32:14 GMT https://vulnogram.org/CVE-2026-35191 https://vulnogram.org/CVE-2026-35191 Issue summary: The OpenSSL QUIC server, when configured to not preform address validation, can be forced to count incoming packets multiple times in its unvalidated credit computation, leading to a violation of the RFC 9000 unvalidated connection amp… Low Network Exploitable Tue, 29 Sep 2026 15:32:12 GMT https://vulnogram.org/CVE-2026-35189 https://vulnogram.org/CVE-2026-35189 Issue summary: A certificate with many nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap growth when OpenSSL caches X.509 extensions. Impact summary: Receiving a crafted certificate from a malicious peer can lead to signifi… Medium Network Exploitable Tue, 29 Sep 2026 15:32:11 GMT https://vulnogram.org/CVE-2026-75803 https://vulnogram.org/CVE-2026-75803 Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ciphertext can report success without verifying the supplied authentication tag when the operation is finalized by calling the EVP_Cipher() function. Impact summary: Applications c… Critical Network Exploitable Tue, 25 Aug 2026 13:00:25 GMT https://vulnogram.org/CVE-2026-63076 https://vulnogram.org/CVE-2026-63076 Issue summary: OpenSSL CMP password based protection verification only checks whether the protectionAlg parameter was not NULL and not its ASN.1 type, before treating it as a PBMParameter. A crafted message can contain a parameter of a different type… High Network Exploitable Tue, 25 Aug 2026 13:00:11 GMT https://vulnogram.org/CVE-2026-63075 https://vulnogram.org/CVE-2026-63075 Issue summary: When OpenSSL processes QUIC traffic from a peer that repeatedly sends ack-eliciting packets while not acknowledging ACK-only responses, the QUIC stack can retain ACK-only packet metadata for the lifetime of the connection. Impact summa… High Network Exploitable Tue, 25 Aug 2026 13:00:04 GMT https://vulnogram.org/CVE-2026-63074 https://vulnogram.org/CVE-2026-63074 Issue summary: The OpenSSL Certificate Management Protocol (CMP) caches additional certificates (extraCerts) sent in a CMP message, but never expunges them (for instance if they are invalid). If a server reuses an OSSL_CMP_CTX frequently, this cache… Medium Network Exploitable Tue, 25 Aug 2026 12:59:58 GMT https://vulnogram.org/CVE-2026-63073 https://vulnogram.org/CVE-2026-63073 Issue summary: OpenSSL CMP response validation passed an unexpected response sender distinguished name directly as the format string to `ERR_raise_data()`. Impact summary: A malicious or intercepted CMP endpoint can crash a CMP client that enforces a… Critical Network Exploitable Tue, 25 Aug 2026 12:59:43 GMT https://vulnogram.org/CVE-2026-63072 https://vulnogram.org/CVE-2026-63072 Issue summary: OpenSSL CMS decryption sizes the key-unwrap output buffer based on querying the unwrapped key size, but the AES-WRAP-PAD unwrap primitive can write and cleanse more bytes than that query reports, causing an 8-byte out-of-bounds heap wr… High Network Exploitable Tue, 25 Aug 2026 12:59:34 GMT https://vulnogram.org/CVE-2026-54874 https://vulnogram.org/CVE-2026-54874 Issue summary: Receiving a DTLS record for a future epoch while a handshake is in progress causes OpenSSL to buffer far more memory than the record itself requires. Impact summary: A peer can use a small amount of network traffic to make an OpenSSL D… High Network Exploitable Tue, 25 Aug 2026 12:59:17 GMT https://vulnogram.org/CVE-2026-18798 https://vulnogram.org/CVE-2026-18798 Issue summary: QUIC server may double free QRX (QUIC record layer RX) object when channel creation fails for initial packet. Impact summary: Double free leads to heap corruption, which typically results in termination of QUIC server process, leading… High Network Exploitable Tue, 25 Aug 2026 12:59:04 GMT https://vulnogram.org/CVE-2026-14457 https://vulnogram.org/CVE-2026-14457 Issue summary: In a server or client configuration with RFC7250 Raw Public Keys (RPKs) enabled, and only the private key (with no associated certificate) configured locally, a NULL pointer dereference may occur when the remote peer solicits raw publi… High Network Exploitable Tue, 25 Aug 2026 12:58:29 GMT https://vulnogram.org/CVE-2026-14456 https://vulnogram.org/CVE-2026-14456 Issue summary: When an OpenSSL QUIC server (Listener SSL object) processes valid QUIC Initial packets for unknown destination connection IDs, it can allocate and queue new incoming channels without enforcing any limit. Impact summary: A remote peer t… High Network Exploitable Thu, 13 Aug 2026 13:55:52 GMT https://vulnogram.org/CVE-2026-54876 https://vulnogram.org/CVE-2026-54876 Issue summary: A malicious TLS server can cause a memory leak in a TLS client that has enabled OCSP response checking by sending an OCSP response that contains no single response entries. Impact summary: An attacker can leak an attacker-tunable amoun… High Network Exploitable Wed, 05 Aug 2026 13:59:36 GMT https://vulnogram.org/CVE-2026-45447 https://vulnogram.org/CVE-2026-45447 Issue summary: A specially crafted PKCS#7 or S/MIME signed message could trigger a use-after-free during PKCS#7 signature verification. Impact summary: A use-after-free may result in process crashes, heap corruption, or potentially remote code execut… High Network Exploitable Tue, 09 Jun 2026 16:03:32 GMT https://vulnogram.org/CVE-2026-45446 https://vulnogram.org/CVE-2026-45446 Issue summary: The implementations of AES-SIV (RFC 5297) and AES-GCM-SIV (RFC 8452) mishandle the authentication of AAD (Additional Authenticated Data) with an empty ciphertext allowing a forgery of such messages. Impact summary: An attacker can forg… Medium Network Exploitable Tue, 09 Jun 2026 16:03:32 GMT https://vulnogram.org/CVE-2026-45445 https://vulnogram.org/CVE-2026-45445 Issue summary: When an application drives an AES-OCB context through the public EVP_Cipher() one-shot interface, the application-supplied initialisation vector (IV) is silently discarded. Impact summary: Every message encrypted under the same key use… High Network Exploitable Tue, 09 Jun 2026 16:03:31 GMT https://vulnogram.org/CVE-2026-42771 https://vulnogram.org/CVE-2026-42771 Issue summary: When the X509_VERIFY_PARAM_set1_email is called by an application to validate a crafted e-mail address, such as during S/MIME message validation, an out of bounds read can happen. Impact summary: This out of bounds read will not direct… Medium Tue, 09 Jun 2026 16:03:30 GMT https://vulnogram.org/CVE-2026-42770 https://vulnogram.org/CVE-2026-42770 Issue summary: When EVP_PKEY_derive_set_peer() is called with a DHX (X9.42) peer key, the peer key is not properly checked for the subgroup membership. Impact summary: A malicious peer which presents an X9.42 key carrying the victim's p and g paramet… Low Network Exploitable Tue, 09 Jun 2026 16:03:29 GMT https://vulnogram.org/CVE-2026-42769 https://vulnogram.org/CVE-2026-42769 Issue Summary: An error in the callback used to verify the certificate provided in a Root CA key update Certificate Management Protocol (CMP) message response rendered the certificate validation ineffectual, which could lead to escalation of credenti… Medium Tue, 09 Jun 2026 16:03:28 GMT https://vulnogram.org/CVE-2026-42768 https://vulnogram.org/CVE-2026-42768 Issue summary: The CMS_decrypt and PKCS7_decrypt functions are vulnerable to Bleichenbacher-style attack when an attacker is able to provide the CMS or S/MIME messages and observe the error code and/or decryption output. Impact summary: The Bleichenb… Low Network Exploitable Tue, 09 Jun 2026 16:03:28 GMT https://vulnogram.org/CVE-2026-42767 https://vulnogram.org/CVE-2026-42767 Issue summary: An attacker-controlled CMP (Certificate Management Protocol) server could trigger a NULL pointer dereference in a CMP client application. Impact summary: A NULL pointer dereference causes a crash of the application and a Denial of Serv… Medium Network Exploitable Tue, 09 Jun 2026 16:03:27 GMT https://vulnogram.org/CVE-2026-42766 https://vulnogram.org/CVE-2026-42766 Issue summary: A specially crafted password-encrypted CMS message can trigger a NULL pointer dereference during CMS decryption. Impact summary: This NULL pointer dereference leads to an application crash and a Denial of Service. The CMS PasswordRecip… Medium Network Exploitable Tue, 09 Jun 2026 16:03:26 GMT https://vulnogram.org/CVE-2026-42765 https://vulnogram.org/CVE-2026-42765 Issue summary: When a partial-chain certificate verification is enabled together with OCSP response checking for the whole chain, a NULL dereference will happen if the verified chain does not have a self-signed trusted anchor, crashing the process. I… High Network Exploitable Tue, 09 Jun 2026 16:03:25 GMT https://vulnogram.org/CVE-2026-42764 https://vulnogram.org/CVE-2026-42764 Issue summary: Receiving a QUIC initial packet with an invalid token may trigger a NULL pointer dereference in the OpenSSL QUIC server with address validation disabled. Impact summary: NULL pointer dereference typically causes abnormal termination of… High Network Exploitable Tue, 09 Jun 2026 16:03:25 GMT https://vulnogram.org/CVE-2026-35188 https://vulnogram.org/CVE-2026-35188 Issue summary: A malicious server can exploit TLS OCSP stapling by delivering a crafted response through the status_request extension, triggering a double-free in the client's certificate verification path. Impact summary: Successful exploitation all… Medium Tue, 09 Jun 2026 16:03:24 GMT https://vulnogram.org/CVE-2026-34183 https://vulnogram.org/CVE-2026-34183 Issue summary: Remote peer may exhaust heap memory of the QUIC server or client by flooding it with packets containing PATH_CHALLENGE frames. Impact summary: A malicious remote peer can cause an unbounded memory allocation which can lead to an abnorm… High Network Exploitable Tue, 09 Jun 2026 16:03:23 GMT https://vulnogram.org/CVE-2026-34182 https://vulnogram.org/CVE-2026-34182 Issue Summary: Cryptographic Message Services (CMS) processing fails to perform sufficient input validation on the cipher and tag length fields of AuthEnvelopedData containers, leading to various potential compromises. Impact Summary: Attackers makin… Critical Network Exploitable Tue, 09 Jun 2026 16:03:22 GMT https://vulnogram.org/CVE-2026-34181 https://vulnogram.org/CVE-2026-34181 Issue Summary: The PKCS#12 file processing fails to perform sufficient input validation for files that use Password-Based Message Authentication Code 1 (PBMAC1) integrity mechanism allowing a certificate and private key forgery. Impact Summary: An at… High Network Exploitable Tue, 09 Jun 2026 16:03:22 GMT https://vulnogram.org/CVE-2026-34180 https://vulnogram.org/CVE-2026-34180 Issue summary: Parsing a crafted DER-encoded ASN.1 structure with a primitive element whose content exceeds 2 gigabytes in length may cause a heap buffer over-read on 64-bit Unix and Unix-like platforms. Impact summary: The heap buffer over-read may… High Network Exploitable Tue, 09 Jun 2026 16:03:17 GMT https://vulnogram.org/CVE-2026-9076 https://vulnogram.org/CVE-2026-9076 Issue summary: When CMS password-based decryption (RFC 3211 / PWRI key unwrap) processes attacker-supplied CMS data, an attacker-chosen stream-mode KEK cipher can trigger a heap out-of-bounds read in kek_unwrap_key(). Impact summary: A heap buffer ov… High Network Exploitable Tue, 09 Jun 2026 16:03:16 GMT https://vulnogram.org/CVE-2026-7383 https://vulnogram.org/CVE-2026-7383 Issue summary: A signed integer overflow when sizing the destination buffer for Unicode output in ASN1_mbstring_ncopy() can lead to a heap buffer overflow. Impact summary: A heap buffer overflow may lead to a crash or possibly attacker controlled cod… High Network Exploitable Tue, 09 Jun 2026 16:03:15 GMT https://vulnogram.org/CVE-2026-31790 https://vulnogram.org/CVE-2026-31790 Issue summary: Applications using RSASVE key encapsulation to establish a secret encryption key can send contents of an uninitialized memory buffer to a malicious peer. Impact summary: The uninitialized buffer might contain sensitive data from the pr… High Network Exploitable Tue, 07 Apr 2026 22:00:56 GMT https://vulnogram.org/CVE-2026-31789 https://vulnogram.org/CVE-2026-31789 Issue summary: Converting an excessively large OCTET STRING value to a hexadecimal string leads to a heap buffer overflow on 32 bit platforms. Impact summary: A heap buffer overflow may lead to a crash or possibly an attacker controlled code executio… Medium Tue, 07 Apr 2026 22:00:54 GMT https://vulnogram.org/CVE-2026-28390 https://vulnogram.org/CVE-2026-28390 Issue summary: During processing of a crafted CMS EnvelopedData message with KeyTransportRecipientInfo a NULL pointer dereference can happen. Impact summary: Applications that process attacker-controlled CMS data may crash before authentication or cr… High Network Exploitable Tue, 07 Apr 2026 22:00:54 GMT https://vulnogram.org/CVE-2026-28389 https://vulnogram.org/CVE-2026-28389 Issue summary: During processing of a crafted CMS EnvelopedData message with KeyAgreeRecipientInfo a NULL pointer dereference can happen. Impact summary: Applications that process attacker-controlled CMS data may crash before authentication or crypto… High Network Exploitable Tue, 07 Apr 2026 22:00:53 GMT https://vulnogram.org/CVE-2026-28388 https://vulnogram.org/CVE-2026-28388 Issue summary: When a delta CRL that contains a Delta CRL Indicator extension is processed a NULL pointer dereference might happen if the required CRL Number extension is missing. Impact summary: A NULL pointer dereference can trigger a crash which l… High Network Exploitable Tue, 07 Apr 2026 22:00:52 GMT https://vulnogram.org/CVE-2026-28387 https://vulnogram.org/CVE-2026-28387 Issue summary: An uncommon configuration of clients performing DANE TLSA-based server authentication, when paired with uncommon server DANE TLSA records, may result in a use-after-free and/or double-free on the client side. Impact summary: A use afte… High Network Exploitable Tue, 07 Apr 2026 22:00:51 GMT https://vulnogram.org/CVE-2026-28386 https://vulnogram.org/CVE-2026-28386 Issue summary: Applications using AES-CFB128 encryption or decryption on systems with AVX-512 and VAES support can trigger an out-of-bounds read of up to 15 bytes when processing partial cipher blocks. Impact summary: This out-of-bounds read may trig… Critical Network Exploitable Tue, 07 Apr 2026 22:00:50 GMT