OP
Product
OpenVPN
63
CVEs
0
On KEV
9.8
Max CVSS
3
New 30D
Severity mix
Critical 8High 26Medium 13Low 5
Watch
Add OpenVPN to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-35058 | 6.5 | Jun 8 | Improper validation of packet length during tls-crypt-v2 key extraction in OpenVPN 2.6.0 through 2.6.19 and 2.7_alpha1 through 2.7.1 allows authenticated attackers to trigger a… Affected: 2.6.0 through 2.6.19; 2.7_alpha1 through 2.7.1 |
| CVE-2017-7522 | 6.5 | Jun 27 | OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to denial-of-service by authenticated remote attacker via sending a certificate with an embedded NULL character Affected: through 2.3.16; 2.4.0; 2.4.0; 2.4.0; 2.4.0; 2.4.0; +3 more |
| CVE-2017-7479 | 6.5 | May 15 | OpenVPN versions before 2.3.15 and before 2.4.2 are vulnerable to reachable assertion when packet-ID counter rolls over resulting into Denial of Service of server by authenticated… Affected: through 2.3.14; 2.4.0; 2.4.0; 2.4.0; 2.4.0; 2.4.0; +2 more |
| CVE-2026-78221 | 5.9 | Sep 7 | An incorrect buffer size calculation in the Windows Interactive Service in OpenVPN 2.7_alpha1 through 2.7.6 allows local authenticated users to cause memory corruption or disclose… Affected: 2.7_alpha1 through 2.7.6 |
| CVE-2017-7521 | 5.9 | Jun 27 | OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to remote denial-of-service due to memory exhaustion caused by memory leaks and double-free issue in… Affected: through 2.3.16; 2.4.0; 2.4.0; 2.4.0; 2.4.0; 2.4.0; +3 more |
| CVE-2016-6329 | 5.9 | Jan 31 | OpenVPN, when using a 64-bit block cipher, makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted session, as… Affected: through 2.3.14 |
| CVE-2026-81830 | 5.6 | Sep 7 | The Windows interactive service in OpenVPN 2.4.0 through 2.6.22 allows local authenticated users to bypass the trusted configuration directory constraint via incorrect file path… Affected: 2.4.0 through 2.6.22 |
| CVE-2026-78043 | 5.6 | Sep 7 | The Windows Interactive Service in OpenVPN 2.7_alpha1 through 2.7.6 allows local authenticated users to bypass the trusted configuration directory constraint and load arbitrary… Affected: 2.7_alpha1 through 2.7.6 |
| CVE-2025-13751 | 5.5 | Dec 3 | Interactive service agent in OpenVPN version 2.5.0 through 2.6.16 and 2.7_alpha1 through 2.7_rc2 on Windows allows a local authenticated user to connect to the service and trigger… Affected: 2.5.0 before 2.6.17; 2.7; 2.7; 2.7; 2.7; 2.7; +3 more |
| CVE-2026-13122 | 5.3 | Jul 6 | OpenVPN version 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote attackers to cause a denial of service via a malformed authentication token that triggers a… Affected: 2.6.0 through 2.6.20; 2.7_alpha1 through 2.7.4 |
| CVE-2014-5455 | 5.3 | Aug 25 | Unquoted Windows search path vulnerability in the ptservice service prior to PrivateTunnel version 3.0 (Windows) and OpenVPN Connect version 3.1 (Windows) allows local users to… Affected: 2.1.28.0 |
| CVE-2024-28882 | 4.3 | Jul 8 | OpenVPN from 2.6.0 through 2.6.10 in a server role accepts multiple exit notifications from authenticated clients which will extend the validity of a closing session Affected: 2.6.0 before 2.6.11 |
| CVE-2026-63649 | 4.1 | Aug 14 | The Windows interactive service in OpenVPN 2.4.0 through 2.6.21 and 2.7_alpha1 through 2.7.5 allows local authenticated users to bypass the trusted configuration directory… Affected: 2.4.0 before 2.6.22; 2.7_alpha1 before 2.7.6 |
Showing 13