OV
Product
ovpn-dco-win
7
CVEs
0
On KEV
6.9
Max CVSS
2
New 30D
Severity mix
Critical 0High 0Medium 6Low 1
Watch
Add ovpn-dco-win to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-105390 | 6.9 | Oct 13 | Improper synchronization in the OpenVPN ovpn-dco-win for Windows versions 0.6.5 through 1.3.5 and 2.4.0 through 2.8.7 allows local attackers to trigger a deadlock via a crafted… Affected: 0.6.5 through 1.3.5; 2.4.0 through 2.8.7 |
| CVE-2026-82325 | 6.8 | Sep 7 | A use-after-free vulnerability in the OpenVPN ovpn-dco-win driver version 2.5.0 through 2.8.6 allows local authenticated users to cause a system crash via crafted control messages Affected: 2.5.0 through 2.8.6 |
| CVE-2026-11604 | 6.5 | Jun 10 | An incorrect buffer size calculation in the epoch key generator in OpenVPN ovpn-dco-win version 2.0.0 through 2.8.3 allows a remote authenticated peer to trigger a heap-based… Affected: 2.0.0 through 2.5.8 |
| CVE-2026-115402 New | 5.7 | Oct 28 | OpenVPN ovpn-dco-win 0.6.5 through 2.8.13 allows unprivileged local users to cause a denial of service (system crash) via a race condition in the TCP connect path Affected: 0.6.5 through 2.8.13 |
| CVE-2026-2738 | 5.6 | Feb 19 | Buffer overflow in ovpn‑dco‑win version 2.8.0 allows local attackers to cause a system crash by sending too large packets to the remote peer when the AEAD tag appears at the end… Affected: 2.8.0 |
| CVE-2025-50054 | 5.5 | Jun 20 | Buffer overflow in OpenVPN ovpn-dco-win version 1.3.0 and earlier and version 2.5.8 and earlier allows a local user process to send a too large control message buffer to the… Affected: through 1.3.0; 2.4.0 through 2.5.8 |
| CVE-2024-5198 | 3.3 | Jan 15 | OpenVPN ovpn-dco for Windows version 1.1.1 allows an unprivileged local attacker to send I/O control messages with invalid data to the driver resulting in a NULL pointer… Affected: 1.1.1 |
Showing 7