OP
Vendor
OpenSSL
318
CVEs
1
On KEV
14
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-84784 | OP OpenSSL OpenSSL | 7.5 | Sep 29 | QUIC: Unbounded RETIRE_CONNECTION_ID Backlog |
| CVE-2026-84783 | OP OpenSSL OpenSSL | 7.5 | Sep 29 | Use-After-Free in X.509 Extension Cache Under Concurrent Use |
| CVE-2026-84782 | OP OpenSSL OpenSSL | 8.2 | Sep 29 | DTLS Retransmits Handshake Messages From a Stale Buffer Offset |
| CVE-2026-77696 | OP OpenSSL OpenSSL | 3.7 | Sep 29 | Timing Side-Channel in SM2 Signature Generation |
| CVE-2026-75806 | OP OpenSSL OpenSSL | 5.3 | Sep 29 | Unauthenticated and Undersized DTLS 1.2 AEAD Record Causes DoS |
| CVE-2026-75805 | OP OpenSSL OpenSSL | 5.3 | Sep 29 | NULL Pointer Dereference in CMP Client Revocation Response Handling |
| CVE-2026-75804 | OP OpenSSL OpenSSL | 5.3 | Sep 29 | QUIC Connection-Level Flow Control is Not Enforced for Streams |
| CVE-2026-72897 | OP OpenSSL OpenSSL | 7.5 | Sep 29 | Out-of-Bounds Access After SSL_set_SSL_CTX() During a Handshake |
| CVE-2026-54875 | OP OpenSSL OpenSSL | 3.7 | Sep 29 | Non-Constant-Time SM2 Scalar Multiplication on ARM64 and RISC-V |
| CVE-2026-54873 | OP OpenSSL OpenSSL | 7.5 | Sep 29 | QUIC STREAM Fragment Metadata DoS |
| CVE-2026-54872 | OP OpenSSL OpenSSL | 3.7 | Sep 29 | Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves |
| CVE-2026-42772 | OP OpenSSL OpenSSL | 5.3 | Sep 29 | Potential CPU DoS via O(n^2) Fragment Reassembly in QUIC |
| CVE-2026-35191 | OP OpenSSL OpenSSL | 3.7 | Sep 29 | QUIC Unvalidated Amplification Credit may be Over Accounted |
| CVE-2026-35189 | OP OpenSSL OpenSSL | 5.3 | Sep 29 | Excessive Memory Allocation in Relative CRLDP Processing |
| CVE-2026-75803 | OP OpenSSL OpenSSL | 9.1 | Aug 25 | AEAD Forgeries with Empty Ciphertext When Using EVP_Cipher() |
| CVE-2026-63076 | OP OpenSSL OpenSSL | 7.5 | Aug 25 | Invalid Pointer Dereference in CMP Server via Crafted protectionAlg |
| CVE-2026-63075 | OP OpenSSL OpenSSL | 7.5 | Aug 25 | QUIC ACK-only Packet Retention Can Cause Memory Exhaustion |
| CVE-2026-63074 | OP OpenSSL OpenSSL | 5.9 | Aug 25 | CMP Indefinite Cache Growth of ExtraCerts |
| CVE-2026-63073 | OP OpenSSL OpenSSL | 9.8 | Aug 25 | Untrusted Sender DN Used as Format String in CMP Response Validation |
| CVE-2026-63072 | OP OpenSSL OpenSSL | 7.5 | Aug 25 | Heap Buffer Overflow in CMS Key Unwrapping |
| CVE-2026-54874 | OP OpenSSL OpenSSL | 7.5 | Aug 25 | Excessive Memory Use Buffering DTLS Records for a Future Epoch |
| CVE-2026-18798 | OP OpenSSL OpenSSL | 7.5 | Aug 25 | QUIC Server May Trigger Double Free When Processing INITIAL Packet |
| CVE-2026-14457 | OP OpenSSL OpenSSL | 7.5 | Aug 25 | RPK Server Signature Algorithm Selection Can Dereference a Missing Certificate |
| CVE-2026-14456 | OP OpenSSL OpenSSL | 7.5 | Aug 13 | Unbounded Memory Growth in QUIC Server Incoming Channel Queue |
| CVE-2026-54876 | OP OpenSSL OpenSSL | 7.5 | Aug 5 | Client-Side Memory Leak in OCSP Response Checking |
| CVE-2026-45447 | OP OpenSSL OpenSSL | 8.8 | Jun 9 | Heap Use-After-Free in the PKCS7_verify() Function |
| CVE-2026-45446 | OP OpenSSL OpenSSL | 4.8 | Jun 9 | Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes |
| CVE-2026-45445 | OP OpenSSL OpenSSL | 7.5 | Jun 9 | AES-OCB IV Ignored on EVP_Cipher() Path |
| CVE-2026-42771 | OP OpenSSL OpenSSL | 6.2 | Jun 9 | Possible Out of Bounds Read in X509_VERIFY_PARAM_set1_email() |
| CVE-2026-42770 | OP OpenSSL OpenSSL | 3.7 | Jun 9 | FFC-DH Peer Validation Uses Attacker-Supplied q |
| CVE-2026-42769 | OP OpenSSL OpenSSL | 5.3 | Jun 9 | Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate |
| CVE-2026-42768 | OP OpenSSL OpenSSL | 3.7 | Jun 9 | Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt() |
| CVE-2026-42767 | OP OpenSSL OpenSSL | 5.9 | Jun 9 | NULL Pointer Dereference in CRMF EncryptedValue Decryption |
| CVE-2026-42766 | OP OpenSSL OpenSSL | 5.9 | Jun 9 | Possible NULL Dereference in Password-Based CMS Decryption |
| CVE-2026-42765 | OP OpenSSL OpenSSL | 7.5 | Jun 9 | NULL Dereference in Certificate Verification with OCSP Checking |
| CVE-2026-42764 | OP OpenSSL OpenSSL | 7.5 | Jun 9 | NULL Pointer Dereference in QUIC Server Initial Packet Handling |
| CVE-2026-35188 | OP OpenSSL OpenSSL | 5.0 | Jun 9 | Double-free When Checking OCSP Stapled Response |
| CVE-2026-34183 | OP OpenSSL OpenSSL | 7.5 | Jun 9 | Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler |
| CVE-2026-34182 | OP OpenSSL OpenSSL | 9.1 | Jun 9 | CMS AuthEnvelopedData Processing May Accept Forged Messages |
| CVE-2026-34181 | OP OpenSSL OpenSSL | 7.4 | Jun 9 | PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys |
| CVE-2026-34180 | OP OpenSSL OpenSSL | 7.5 | Jun 9 | Heap Buffer Over-read in ASN.1 Content Parsing |
| CVE-2026-9076 | OP OpenSSL OpenSSL | 7.5 | Jun 9 | Out-of-Bounds Read in CMS Password-Based Decryption |
| CVE-2026-7383 | OP OpenSSL OpenSSL | 8.1 | Jun 9 | Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion |
| CVE-2026-31790 | OP OpenSSL OpenSSL | 7.5 | Apr 7 | Incorrect Failure Handling in RSA KEM RSASVE Encapsulation |
| CVE-2026-31789 | OP OpenSSL OpenSSL | 9.8 | Apr 7 | Heap Buffer Overflow in Hexadecimal Conversion |
| CVE-2026-28390 | OP OpenSSL OpenSSL | 7.5 | Apr 7 | Possible NULL Dereference When Processing CMS KeyTransportRecipientInfo |
| CVE-2026-28389 | OP OpenSSL OpenSSL | 7.5 | Apr 7 | Possible NULL Dereference When Processing CMS KeyAgreeRecipientInfo |
| CVE-2026-28388 | OP OpenSSL OpenSSL | 7.5 | Apr 7 | NULL Pointer Dereference When Processing a Delta CRL |
| CVE-2026-28387 | OP OpenSSL OpenSSL | 8.1 | Apr 7 | Potential Use-after-free in DANE Client Code |
| CVE-2026-28386 | OP OpenSSL OpenSSL | 7.5 | Apr 7 | Out-of-bounds Read in AES-CFB-128 on X86-64 with AVX-512 Support |
| CVE-2026-2673 | OP OpenSSL OpenSSL | 6.5 | Mar 13 | OpenSSL TLS 1.3 server may choose unexpected key agreement group |
| CVE-2025-66199 | OP Openssl Openssl | 5.9 | Jan 27 | Issue summary: A TLS 1.3 connection using certificate compression can be forced to allocate a large buffer before decompression without checking against the configured certificate… |
| CVE-2025-15469 | OP Openssl Openssl | 5.5 | Jan 27 | Issue summary: The 'openssl dgst' command-line tool silently truncates input data to 16MB when using one-shot signing algorithms and reports success instead of an error |
| CVE-2025-15468 | OP Openssl Openssl | 5.9 | Jan 27 | Issue summary: If an application using the SSL_CIPHER_find() function in a QUIC protocol client or server receives an unknown cipher suite from the peer, a NULL dereference occurs |
| CVE-2025-11187 | OP Openssl Openssl | 6.1 | Jan 27 | Issue summary: PBMAC1 parameters in PKCS#12 files are missing validation which can trigger a stack-based buffer overflow, invalid pointer or NULL pointer dereference during MAC… |
| CVE-2026-22796 | OP OpenSSL OpenSSL | 5.3 | Jan 27 | ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function |
| CVE-2026-22795 | OP OpenSSL OpenSSL | 5.5 | Jan 27 | Missing ASN1_TYPE validation in PKCS#12 parsing |
| CVE-2025-69421 | OP OpenSSL OpenSSL | 7.5 | Jan 27 | NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function |
| CVE-2025-69420 | OP OpenSSL OpenSSL | 7.5 | Jan 27 | Missing ASN1_TYPE validation in TS_RESP_verify_response() function |
| CVE-2025-69419 | OP OpenSSL OpenSSL | 7.4 | Jan 27 | Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion |