OP
Product
OpenSSL
On CISA KEVExploited in the wild
317
CVEs
1
On KEV
9.8
Max CVSS
14
New 30D
Severity mix
Critical 17High 87Medium 74Low 13
Watch
Add OpenSSL to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-77696 | 3.7 | Sep 29 | Timing Side-Channel in SM2 Signature Generation Affected: 4.0.0 before 4.0.3; 3.6.0 before 3.6.5; 3.5.0 before 3.5.9; 3.4.0 before 3.4.8; 3.0.0 before 3.0.23; 1.1.1 before 1.1.1zj |
| CVE-2026-54875 | 3.7 | Sep 29 | Non-Constant-Time SM2 Scalar Multiplication on ARM64 and RISC-V Affected: 4.0.0 before 4.0.3; 3.6.0 before 3.6.5; 3.5.0 before 3.5.9; 3.4.0 before 3.4.8 |
| CVE-2026-54872 | 3.7 | Sep 29 | Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves Affected: 4.0.0 before 4.0.3; 3.6.0 before 3.6.5; 3.5.0 before 3.5.9; 3.4.0 before 3.4.8; 3.0.0 before 3.0.23; 1.1.1 before 1.1.1zj; +1 more |
| CVE-2026-35191 | 3.7 | Sep 29 | QUIC Unvalidated Amplification Credit may be Over Accounted Affected: 4.0.0 before 4.0.3; 3.6.0 before 3.6.5; 3.5.0 before 3.5.9 |
| CVE-2026-42770 | 3.7 | Jun 9 | FFC-DH Peer Validation Uses Attacker-Supplied q Affected: 4.0.0 before 4.0.1; 3.6.0 before 3.6.3; 3.5.0 before 3.5.7; 3.4.0 before 3.4.6; 3.0.0 before 3.0.21 |
| CVE-2026-42768 | 3.7 | Jun 9 | Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt() Affected: 4.0.0 before 4.0.1; 3.6.0 before 3.6.3; 3.5.0 before 3.5.7; 3.4.0 before 3.4.6 |
| CVE-2021-23839 | 3.7 | Feb 16 | OpenSSL 1.0.2 supports SSLv2 Affected: 1.0.2s through 1.0.2x |
| CVE-2020-1968 | 3.7 | Sep 9 | The Raccoon attack exploits a flaw in the TLS specification which can lead to an attacker being able to compute the pre-master secret in connections which have used a… Affected: 1.0.2 through 1.0.2v |
| CVE-2019-1563 | 3.7 | Sep 10 | Padding Oracle in PKCS7_dataDecode and CMS_decrypt_set1_pkey Affected: Fixed in OpenSSL 1.1.1d (Affected 1.1.1-1.1.1c); Fixed in OpenSSL 1.1.0l (Affected 1.1.0-1.1.0k); Fixed in OpenSSL 1.0.2t (Affected 1.0.2-1.0.2s) |
| CVE-2016-0701 | 3.7 | Feb 15 | The DH_check_pub_key function in crypto/dh/dh_check.c in OpenSSL 1.0.2 before 1.0.2f does not ensure that prime numbers are appropriate for Diffie-Hellman (DH) key exchange, which… Affected: 1.0.2; 1.0.2; 1.0.2; 1.0.2; 1.0.2a; 1.0.2b; +3 more |
| CVE-2015-4000 | 3.7 | May 21 | The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_EXPORT choice, which allows… Affected: 1.0.1 through 1.0.1m; 1.0.2 through 1.0.2a; through 1.0.1m |
| CVE-2014-3566 | 3.4 | Oct 15 | The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain… Affected: 0.9.8; 0.9.8a; 0.9.8b; 0.9.8c; 0.9.8d; 0.9.8e; +34 more |
| CVE-2019-1552 | 3.3 | Jul 30 | OpenSSL has internal defaults for a directory tree where it can find a configuration file as well as certificates used for verification in TLS Affected: 1.0.2 through 1.0.2s; 1.1.0 through 1.1.0k; 1.1.1 through 1.1.1c |
Showing 13