OpenSSL security vulnerabilities
Cryptography. Public CVE monitoring for OpenSSL. Vendor security advisories are linked on this page.
Built for Platform and cryptography teams.
116 public records · 0 security-fix timeline events. 0 published in the last 7 days. 61 store a version range.
What you can do here
Current vulnerabilities
KEV-first priority plus newest publications for this stack.
Verified security fixes
Timeline events and, for Odoo, Community Git patch evidence — not keyword-only guesses.
Monitoring
Watch this technology from your account when you want alerts on new matches.
Patch intelligence
Use version checkers and advisory links to confirm upgrades before you change production.
- Critical 1
- High 5
- Medium 8
- Low 5
2026-08-0319 issues2026-10-31
Known exploited
View all known exploited- High7.5OpenSSL Information Disclosure VulnerabilityPatch nowKEVEPSS 100.00%Apr 7, 2014
- Medium4.3The ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k allows remote SSL servers to conduct RSA-to-EXPORT_RSA downgPatch nowKEVEPSS 98.69%Jan 9, 2015
Recently published
Browse catalog- Medium6.5ZDI-26-789: OpenSSL CMP Use of Externally-Controlled Format String Information Disclosure VulnerabilityCheck if you run itEPSS 1.16%Oct 22, 2026
- Critical9.2SWUpdate through 2026.05.1 contains an improper certificate validation vulnerability in crypto/swupdate_cms_verify_openssl.c that trusts untrusted X.509 certificates embedded in CMCheck if you run itEPSS 0.21%Oct 12, 2026
- High8.2Issue summary: The DTLS retransmission logic does not correctly handle a handshake message write that is suspended part-way through.Check if you run itEPSS 0.83%Sep 29, 2026
- Medium5.3Issue summary: An established DTLS 1.2 association using an AEAD cipher suite can be terminated by a single unauthenticated datagram whose encrypted fragment is shorter than the maCheck if you run itEPSS 1.10%Sep 29, 2026
- Medium5.3Issue summary: A CMP client that requests certificate revocation on the basis of a PKCS#10 CSR may dereference a NULL pointer and terminate abnormally when processing a crafted revCheck if you run itEPSS 0.32%Sep 29, 2026
- Medium5.3Issue summary: A certificate with many nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap growth when OpenSSL caches X.509 extensions.Check if you run itEPSS 0.32%Sep 29, 2026
- High7.5QUIC: Unbounded RETIRE_CONNECTION_ID BacklogCheck if you run itEPSS 0.61%Sep 29, 2026
- Medium5.3QUIC Connection-Level Flow Control is Not Enforced for StreamsCheck if you run itEPSS 0.53%Sep 29, 2026
- High7.5Out-of-Bounds Access After SSL_set_SSL_CTX() During a HandshakeCheck if you run itEPSS 0.39%Sep 29, 2026
- High7.5QUIC STREAM Fragment Metadata DoSCheck if you run itEPSS 0.72%Sep 29, 2026