Login Request a demo
OP
Product
OpenSSL
by OpenSSL · last CVE Sep 29, 2026
On CISA KEVExploited in the wild
317
CVEs
1
On KEV
9.8
Max CVSS
14
New 30D
Vulnerabilities317In the news10Timeline
Severity mix
Critical 17High 87Medium 74Low 13
Severity
All severities317Critical17High87Medium74Low13
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add OpenSSL to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2014-0160
In wildKEV
7.5
100%
Apr 7
OpenSSL Information Disclosure Vulnerability
Affected: 1.0.1 before 1.0.1g
CVE-2026-63073
9.8
1%
Aug 25
Untrusted Sender DN Used as Format String in CMP Response Validation
Affected: 4.0.0 before 4.0.2; 3.6.0 before 3.6.4; 3.5.0 before 3.5.8; 3.4.0 before 3.4.7
CVE-2026-31789
9.8
0%
Apr 7
Heap Buffer Overflow in Hexadecimal Conversion
Affected: 3.6.0 before 3.6.2; 3.5.0 before 3.5.6; 3.4.0 before 3.4.5; 3.3.0 before 3.3.7; 3.0.0 before 3.0.20
CVE-2022-2274
9.8
48%
Jul 1
RSA implementation bug in AVX512IFMA instructions
Affected: Affects OpenSSL 3.0.4
CVE-2021-3711
9.8
88%
Aug 24
SM2 Decryption Buffer Overflow
Affected: Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k)
CVE-2016-6309
9.8
70%
Sep 26
statem/statem.c in OpenSSL 1.1.0a does not consider memory-block movement after a realloc call, which allows remote attackers to cause a denial of service (use-after-free) or…
Affected: 1.1.0a
CVE-2016-6303
9.8
32%
Sep 16
Integer overflow in the MDC2_Update function in crypto/mdc2/mdc2dgst.c in OpenSSL before 1.1.0 allows remote attackers to cause a denial of service (out-of-bounds write and…
Affected: 1.0.1; 1.0.1a; 1.0.1b; 1.0.1c; 1.0.1d; 1.0.1e; +24 more
CVE-2016-2182
9.8
44%
Sep 16
The BN_bn2dec function in crypto/bn/bn_print.c in OpenSSL before 1.1.0 does not properly validate division results, which allows remote attackers to cause a denial of service…
Affected: 1.0.1; 1.0.1a; 1.0.1b; 1.0.1c; 1.0.1d; 1.0.1e; +24 more
CVE-2016-2177
9.8
45%
Jun 20
OpenSSL through 1.0.2h incorrectly uses pointer arithmetic for heap-buffer boundary checks, which might allow remote attackers to cause a denial of service (integer overflow and…
Affected: 1.0.1; 1.0.1a; 1.0.1b; 1.0.1c; 1.0.1d; 1.0.1e; +24 more
CVE-2016-2108
9.8
78%
May 5
The ASN.1 implementation in OpenSSL before 1.0.1o and 1.0.2 before 1.0.2c allows remote attackers to execute arbitrary code or cause a denial of service (buffer underflow and…
Affected: through 1.0.1n; 1.0.2; 1.0.2; 1.0.2; 1.0.2; 1.0.2a; +1 more
CVE-2016-2842
9.8
54%
Mar 3
The doapr_outch function in crypto/bio/b_print.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g does not verify that a certain memory allocation succeeds, which allows…
Affected: 1.0.1; 1.0.1; 1.0.1; 1.0.1; 1.0.1a; 1.0.1b; +26 more
CVE-2016-0799
9.8
32%
Mar 3
The fmtstr function in crypto/bio/b_print.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g improperly calculates string lengths, which allows remote attackers to cause a…
Affected: 1.0.1; 1.0.1; 1.0.1; 1.0.1; 1.0.1a; 1.0.1b; +26 more
CVE-2016-0705
9.8
26%
Mar 3
Double free vulnerability in the dsa_priv_decode function in crypto/dsa/dsa_ameth.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allows remote attackers to cause a…
Affected: 1.0.1; 1.0.1; 1.0.1; 1.0.1; 1.0.1a; 1.0.1b; +26 more
CVE-2009-3555
9.8
87%
Nov 9
The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and…
Affected: through 0.9.8k; 1.0
CVE-2003-0545
9.8
87%
Nov 17
Double free vulnerability in OpenSSL 0.9.7 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an SSL client certificate with a…
Affected: 0.9.6; 0.9.7
CVE-2026-75803
9.1
0%
Aug 25
AEAD Forgeries with Empty Ciphertext When Using EVP_Cipher()
Affected: 4.0.0 before 4.0.2; 3.6.0 before 3.6.4; 3.5.0 before 3.5.8; 3.4.0 before 3.4.7; 3.0.0 before 3.0.22
CVE-2026-34182
9.1
1%
Jun 9
CMS AuthEnvelopedData Processing May Accept Forged Messages
Affected: 4.0.0 before 4.0.1; 3.6.0 before 3.6.3; 3.5.0 before 3.5.7; 3.4.0 before 3.4.6; 3.0.0 before 3.0.21
CVE-2024-5535
9.1
6%
Jun 27
SSL_select_next_proto buffer overread
Affected: 3.3.0 before 3.3.2; 3.2.0 before 3.2.3; 3.1.0 before 3.1.7; 3.0.0 before 3.0.15; 1.1.1 before 1.1.1za; 1.0.2 before 1.0.2zk
CVE-2026-45447
8.8
4%
Jun 9
Heap Use-After-Free in the PKCS7_verify() Function
Affected: 4.0.0 before 4.0.1; 3.6.0 before 3.6.3; 3.5.0 before 3.5.7; 3.4.0 before 3.4.6; 3.0.0 before 3.0.21; 1.1.1 before 1.1.1zh; +1 more
CVE-2025-15467
8.8
75%
Jan 27
Stack buffer overflow in CMS (Auth)EnvelopedData parsing
Affected: 3.6.0 before 3.6.1; 3.5.0 before 3.5.5; 3.4.0 before 3.4.4; 3.3.0 before 3.3.6; 3.0.0 before 3.0.19
CVE-2026-84782
8.2
1%
Sep 29
DTLS Retransmits Handshake Messages From a Stale Buffer Offset
Affected: 4.0.0 before 4.0.3; 3.6.0 before 3.6.5; 3.5.0 before 3.5.9; 3.4.0 before 3.4.8; 3.0.0 before 3.0.23; 1.1.1 before 1.1.1zj; +1 more
CVE-2016-2176
8.2
23%
May 5
The X509_NAME_oneline function in crypto/x509/x509_obj.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to obtain sensitive information from process…
Affected: through 1.0.1s; 1.0.2; 1.0.2; 1.0.2; 1.0.2; 1.0.2a; +6 more
CVE-2026-7383
8.1
1%
Jun 9
Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion
Affected: 4.0.0 before 4.0.1; 3.6.0 before 3.6.3; 3.5.0 before 3.5.7; 3.4.0 before 3.4.6; 3.0.0 before 3.0.21; 1.1.1 before 1.1.1zh; +1 more
CVE-2026-28387
8.1
1%
Apr 7
Potential Use-after-free in DANE Client Code
Affected: 3.6.0 before 3.6.2; 3.5.0 before 3.5.6; 3.4.0 before 3.4.5; 3.3.0 before 3.3.7; 3.0.0 before 3.0.20; 1.1.1 before 1.1.1zg
CVE-2023-4807
7.8
2%
Sep 8
POLY1305 MAC implementation corrupts XMM registers on Windows
Affected: 3.1.0 before 3.1.3; 3.0.0 before 3.0.11; 1.1.1 before 1.1.1w
CVE-2026-84784
7.5
1%
Sep 29
QUIC: Unbounded RETIRE_CONNECTION_ID Backlog
Affected: 4.0.0 before 4.0.3; 3.6.0 before 3.6.5; 3.5.0 before 3.5.9; 3.4.0 before 3.4.8
CVE-2026-84783
7.5
0%
Sep 29
Use-After-Free in X.509 Extension Cache Under Concurrent Use
Affected: 4.0.0 before 4.0.3
CVE-2026-72897
7.5
0%
Sep 29
Out-of-Bounds Access After SSL_set_SSL_CTX() During a Handshake
Affected: 4.0.0 before 4.0.3; 3.6.0 before 3.6.5; 3.5.0 before 3.5.9; 3.4.0 before 3.4.8
CVE-2026-54873
7.5
1%
Sep 29
QUIC STREAM Fragment Metadata DoS
Affected: 4.0.0 before 4.0.3; 3.6.0 before 3.6.5; 3.5.0 before 3.5.9; 3.4.0 before 3.4.8
CVE-2026-63076
7.5
2%
Aug 25
Invalid Pointer Dereference in CMP Server via Crafted protectionAlg
Affected: 4.0.0 before 4.0.2; 3.6.0 before 3.6.4; 3.5.0 before 3.5.8; 3.4.0 before 3.4.7; 3.0.0 before 3.0.22
CVE-2026-63075
7.5
1%
Aug 25
QUIC ACK-only Packet Retention Can Cause Memory Exhaustion
Affected: 4.0.0 before 4.0.2; 3.6.0 before 3.6.4; 3.5.0 before 3.5.8; 3.4.0 before 3.4.7
CVE-2026-63072
7.5
1%
Aug 25
Heap Buffer Overflow in CMS Key Unwrapping
Affected: 4.0.0 before 4.0.2; 3.6.0 before 3.6.4; 3.5.0 before 3.5.8; 3.4.0 before 3.4.7; 3.0.0 before 3.0.22; 1.1.1 before 1.1.1zi
CVE-2026-54874
7.5
1%
Aug 25
Excessive Memory Use Buffering DTLS Records for a Future Epoch
Affected: 4.0.0 before 4.0.2; 3.6.0 before 3.6.4; 3.5.0 before 3.5.8; 3.4.0 before 3.4.7; 3.0.0 before 3.0.22; 1.1.1 before 1.1.1zi; +1 more
CVE-2026-18798
7.5
2%
Aug 25
QUIC Server May Trigger Double Free When Processing INITIAL Packet
Affected: 4.0.0 before 4.0.2; 3.6.0 before 3.6.4; 3.5.0 before 3.5.8
CVE-2026-14457
7.5
1%
Aug 25
RPK Server Signature Algorithm Selection Can Dereference a Missing Certificate
Affected: 4.0.0 before 4.0.2; 3.6.0 before 3.6.4; 3.5.0 before 3.5.8; 3.4.0 before 3.4.7
CVE-2026-14456
7.5
1%
Aug 13
Unbounded Memory Growth in QUIC Server Incoming Channel Queue
Affected: 4.0.0 before 4.0.2; 3.6.0 before 3.6.4; 3.5.0 before 3.5.8
CVE-2026-54876
7.5
1%
Aug 5
Client-Side Memory Leak in OCSP Response Checking
Affected: 4.0.0 before 4.0.2; 3.6.0 before 3.6.4
CVE-2026-45445
7.5
1%
Jun 9
AES-OCB IV Ignored on EVP_Cipher() Path
Affected: 4.0.0 before 4.0.1; 3.6.0 before 3.6.3; 3.5.0 before 3.5.7; 3.4.0 before 3.4.6; 3.0.0 before 3.0.21
CVE-2026-42765
7.5
1%
Jun 9
NULL Dereference in Certificate Verification with OCSP Checking
Affected: 4.0.0 before 4.0.1; 3.6.0 before 3.6.3
CVE-2026-42764
7.5
1%
Jun 9
NULL Pointer Dereference in QUIC Server Initial Packet Handling
Affected: 4.0.0 before 4.0.1; 3.6.0 before 3.6.3; 3.5.0 before 3.5.7
CVE-2026-34183
7.5
1%
Jun 9
Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler
Affected: 4.0.0 before 4.0.1; 3.6.0 before 3.6.3; 3.5.0 before 3.5.7; 3.4.0 before 3.4.6
CVE-2026-34180
7.5
1%
Jun 9
Heap Buffer Over-read in ASN.1 Content Parsing
Affected: 4.0.0 before 4.0.1; 3.6.0 before 3.6.3; 3.5.0 before 3.5.7; 3.4.0 before 3.4.6; 3.0.0 before 3.0.21; 1.1.1 before 1.1.1zh; +1 more
CVE-2026-9076
7.5
1%
Jun 9
Out-of-Bounds Read in CMS Password-Based Decryption
Affected: 4.0.0 before 4.0.1; 3.6.0 before 3.6.3; 3.5.0 before 3.5.7; 3.4.0 before 3.4.6; 3.0.0 before 3.0.21; 1.1.1 before 1.1.1zh; +1 more
CVE-2026-31790
7.5
1%
Apr 7
Incorrect Failure Handling in RSA KEM RSASVE Encapsulation
Affected: 3.6.0 before 3.6.2; 3.5.0 before 3.5.6; 3.4.0 before 3.4.5; 3.3.0 before 3.3.7; 3.0.0 before 3.0.20
CVE-2026-28390
7.5
1%
Apr 7
Possible NULL Dereference When Processing CMS KeyTransportRecipientInfo
Affected: 3.6.0 before 3.6.2; 3.5.0 before 3.5.6; 3.4.0 before 3.4.5; 3.3.0 before 3.3.7; 3.0.0 before 3.0.20; 1.1.1 before 1.1.1zg; +1 more
CVE-2026-28389
7.5
1%
Apr 7
Possible NULL Dereference When Processing CMS KeyAgreeRecipientInfo
Affected: 3.6.0 before 3.6.2; 3.5.0 before 3.5.6; 3.4.0 before 3.4.5; 3.3.0 before 3.3.7; 3.0.0 before 3.0.20; 1.1.1 before 1.1.1zg; +1 more
CVE-2026-28388
7.5
1%
Apr 7
NULL Pointer Dereference When Processing a Delta CRL
Affected: 3.6.0 before 3.6.2; 3.5.0 before 3.5.6; 3.4.0 before 3.4.5; 3.3.0 before 3.3.7; 3.0.0 before 3.0.20; 1.1.1 before 1.1.1zg; +1 more
CVE-2026-28386
7.5
0%
Apr 7
Out-of-bounds Read in AES-CFB-128 on X86-64 with AVX-512 Support
Affected: 3.6.0 before 3.6.2
CVE-2025-69421
7.5
1%
Jan 27
NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function
Affected: 3.6.0 before 3.6.1; 3.5.0 before 3.5.5; 3.4.0 before 3.4.4; 3.3.0 before 3.3.6; 3.0.0 before 3.0.19; 1.1.1 before 1.1.1ze; +1 more
CVE-2025-69420
7.5
1%
Jan 27
Missing ASN1_TYPE validation in TS_RESP_verify_response() function
Affected: 3.6.0 before 3.6.1; 3.5.0 before 3.5.5; 3.4.0 before 3.4.4; 3.3.0 before 3.3.6; 3.0.0 before 3.0.19; 1.1.1 before 1.1.1ze
Page 1 of 7 · 317 total
12…7