OpenSSL vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
116 matching records
- UnknownSecurity update for openssl-certsOpen the advisoryOct 23, 2026
- UnknownSecurity update for go1.26-opensslOpen the advisoryOct 22, 2026
- UnknownSecurity update for go1.26-opensslOpen the advisoryOct 22, 2026
- Medium6.5ZDI-26-789: OpenSSL CMP Use of Externally-Controlled Format String Information Disclosure VulnerabilityCheck if you run itEPSS 1.16%Oct 22, 2026
- Low3.1ZDI-26-790: OpenSSL CMS AuthEnvelopedData Improper Validation of Integrity Check Value VulnerabilityCheck if you run itEPSS 1.06%Oct 22, 2026
- UnknownSecurity update for openssl-1_0_0Open the advisoryOct 20, 2026
- UnknownNot Failing Securely ('Failing Open') vulnerability in Apache Tomcat.Check if you run itEPSS 0.45%Oct 20, 2026
- Critical9.2SWUpdate through 2026.05.1 contains an improper certificate validation vulnerability in crypto/swupdate_cms_verify_openssl.c that trusts untrusted X.509 certificates embedded in CMCheck if you run itEPSS 0.21%Oct 12, 2026
- UnknownSecurity update for openssl-3Open the advisoryOct 9, 2026
- High8.2Issue summary: The DTLS retransmission logic does not correctly handle a handshake message write that is suspended part-way through.Check if you run itEPSS 0.83%Sep 29, 2026
- Low3.7Issue summary: SM2 signature generation uses non-constant-time arithmetic on secret values, forming a timing side-channel.Check if you run itEPSS 0.40%Sep 29, 2026
- Medium5.3Issue summary: An established DTLS 1.2 association using an AEAD cipher suite can be terminated by a single unauthenticated datagram whose encrypted fragment is shorter than the maCheck if you run itEPSS 1.10%Sep 29, 2026
- Medium5.3Issue summary: A CMP client that requests certificate revocation on the basis of a PKCS#10 CSR may dereference a NULL pointer and terminate abnormally when processing a crafted revCheck if you run itEPSS 0.32%Sep 29, 2026
- Low3.7Issue summary: The generic elliptic-curve scalar multiplication used for ECDSA and SM2 signature operations with curves that do not have a dedicated implementation leaks informatioCheck if you run itEPSS 0.44%Sep 29, 2026
- Medium5.3Issue summary: A certificate with many nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap growth when OpenSSL caches X.509 extensions.Check if you run itEPSS 0.32%Sep 29, 2026
- High7.5QUIC: Unbounded RETIRE_CONNECTION_ID BacklogCheck if you run itEPSS 0.61%Sep 29, 2026
- Medium5.3QUIC Connection-Level Flow Control is Not Enforced for StreamsCheck if you run itEPSS 0.53%Sep 29, 2026
- High7.5Out-of-Bounds Access After SSL_set_SSL_CTX() During a HandshakeCheck if you run itEPSS 0.39%Sep 29, 2026
- Low3.7Non-Constant-Time SM2 Scalar Multiplication on ARM64 and RISC-VCheck if you run itEPSS 0.48%Sep 29, 2026
- High7.5QUIC STREAM Fragment Metadata DoSCheck if you run itEPSS 0.72%Sep 29, 2026
- Medium5.3Potential CPU DoS via O(n^2) Fragment Reassembly in QUICCheck if you run itEPSS 0.50%Sep 29, 2026
- Low3.7QUIC Unvalidated Amplification Credit may be Over AccountedCheck if you run itEPSS 0.72%Sep 29, 2026
- Medium4.3PHP's OpenSSL stream peer verification checks the certificate's subjectAltName entries first and, whenever no entry matches, falls back to the Common Name.Check if you run itEPSS 0.16%Sep 25, 2026
- Medium6.5php_openssl_matches_wildcard_name() in ext/openssl/xp_ssl.c underflows the length argument passed to memchr() when a TLS server certificate presents a wildcard name whose literal cCheck if you run itEPSS 0.11%Sep 25, 2026
- High7.0ZDI-26-577: Trend Micro VPN OpenSSL Configuration Uncontrolled Search Path Element Local Privilege Escalation VulnerabilityOpen the advisoryAug 13, 2026