OpenSSL vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
116 matching records
- Unknownlibssh2 through 1.11.1, fixed in commit a2ed82d, contains a pre-authentication integer underflow vulnerability in the ssh2_cipher_crypt() function in src/openssl.c that allows a maCheck if you run itEPSS 0.58%Jul 24, 2026
- High7.4Tychon includes an OpenSSL component that specifies an OPENSSLDIR variable as a subdirectory that may be controllable by an unprivileged user on Windows.Check if you run itEPSS 0.25%Jun 1, 2026
- UnknownModerate: openssl security updateOpen the advisoryMay 19, 2026
- Critical9.8Crypt::OpenSSL::PKCS12 versions through 1.94 for Perl truncates passwords with embedded NULLs.Check if you run itEPSS 0.45%May 17, 2026
- Critical9.8Crypt::OpenSSL::PKCS12 versions through 1.94 for Perl have out-of-bounds (OOB) write flaws.Check if you run itEPSS 0.65%May 17, 2026
- Medium5.1rust-openssl provides OpenSSL bindings for the Rust programming language.Check if you run itEPSS 0.17%May 14, 2026
- High8.7rust-openssl provides OpenSSL bindings for the Rust programming language.Check if you run itEPSS 0.21%May 14, 2026
- High7.8There exists an openssl.cnf privilege escalation vulnerability in ZTE Cloud PC client uSmartview.Check if you run itEPSS 0.14%May 7, 2026
- High8.3rust-openssl provides OpenSSL bindings for the Rust programming language.Check if you run itEPSS 0.28%Apr 24, 2026
- High8.1rust-openssl provides OpenSSL bindings for the Rust programming language.Check if you run itEPSS 0.36%Apr 24, 2026
- High7.2rust-openssl provides OpenSSL bindings for the Rust programming language.Check if you run itEPSS 0.25%Apr 24, 2026
- Low1.7rust-openssl provides OpenSSL bindings for the Rust programming language.Check if you run itEPSS 0.29%Apr 24, 2026
- High7.2rust-openssl provides OpenSSL bindings for the Rust programming language.Check if you run itEPSS 0.29%Apr 24, 2026
- High7.3KeePassXC OpenSSL Configuration Uncontrolled Search Path Element Local Privilege Escalation Vulnerability.Check if you run itEPSS 0.23%Apr 11, 2026
- High7.5Issue summary: Applications using RSASVE key encapsulation to establish a secret encryption key can send contents of an uninitialized memory buffer to a malicious peer.Check if you run itEPSS 1.03%Apr 7, 2026
- Critical9.8Issue summary: Converting an excessively large OCTET STRING value to a hexadecimal string leads to a heap buffer overflow on 32 bit platforms.Check if you run itEPSS 0.24%Apr 7, 2026
- High7.5Issue summary: During processing of a crafted CMS EnvelopedData message with KeyTransportRecipientInfo a NULL pointer dereference can happen.Check if you run itEPSS 0.80%Apr 7, 2026
- High7.5Issue summary: During processing of a crafted CMS EnvelopedData message with KeyAgreeRecipientInfo a NULL pointer dereference can happen.Check if you run itEPSS 0.80%Apr 7, 2026
- High7.5Issue summary: When a delta CRL that contains a Delta CRL Indicator extension is processed a NULL pointer dereference might happen if the required CRL Number extension is missing.Check if you run itEPSS 0.89%Apr 7, 2026
- High8.1Issue summary: An uncommon configuration of clients performing DANE TLSA-based server authentication, when paired with uncommon server DANE TLSA records, may result in…Check if you run itEPSS 0.67%Apr 7, 2026
- High7.5Issue summary: Applications using AES-CFB128 encryption or decryption on systems with AVX-512 and VAES support can trigger an out-of-bounds read of up to 15 bytes when…Check if you run itEPSS 0.50%Apr 7, 2026
- High7.2pyOpenSSL is a Python wrapper around the OpenSSL library.Check if you run itEPSS 0.73%Mar 18, 2026
- Low1.7pyOpenSSL is a Python wrapper around the OpenSSL library.Check if you run itEPSS 0.25%Mar 18, 2026
- Medium6.5Issue summary: An OpenSSL TLS 1.3 server may fail to negotiate the expected preferred key exchange group when its key exchange group configuration includes the default…Check if you run itEPSS 0.45%Mar 13, 2026
- High8.8Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can trigger a stack buffer overflow.Check this weekEPSS 74.79%Jan 27, 2026