OpenSSL vulnerabilities
The newest vulnerabilities affecting OpenSSL, up to 200. Subscribe by RSS.
- CVE-2026-84784QUIC: Unbounded RETIRE_CONNECTION_ID BacklogOpenSSL
- CVE-2026-84783Use-After-Free in X.509 Extension Cache Under Concurrent UseOpenSSL
- CVE-2026-84782DTLS Retransmits Handshake Messages From a Stale Buffer OffsetOpenSSL
- CVE-2026-77696Timing Side-Channel in SM2 Signature GenerationOpenSSL
- CVE-2026-75806Unauthenticated and Undersized DTLS 1.2 AEAD Record Causes DoSOpenSSL
- CVE-2026-75805NULL Pointer Dereference in CMP Client Revocation Response HandlingOpenSSL
- CVE-2026-75804QUIC Connection-Level Flow Control is Not Enforced for StreamsOpenSSL
- CVE-2026-72897Out-of-Bounds Access After SSL_set_SSL_CTX() During a HandshakeOpenSSL
- CVE-2026-54875Non-Constant-Time SM2 Scalar Multiplication on ARM64 and RISC-VOpenSSL
- CVE-2026-54873QUIC STREAM Fragment Metadata DoSOpenSSL
- CVE-2026-54872Timing Side-Channel in Scalar Multiplication for Non-NIST EC CurvesOpenSSL
- CVE-2026-42772Potential CPU DoS via O(n^2) Fragment Reassembly in QUICOpenSSL
- CVE-2026-35191QUIC Unvalidated Amplification Credit may be Over AccountedOpenSSL
- CVE-2026-35189Excessive Memory Allocation in Relative CRLDP ProcessingOpenSSL
- CVE-2026-81721openssl_encrypt before 1.4.9 Denial of Service via KDFjahlives openssl_encrypt · openssl-encrypt
- CVE-2026-81720openssl_encrypt before 1.4.9 Denial of Service via Unbounded Argon2jahlives openssl_encrypt · openssl-encrypt
- CVE-2026-81719openssl_encrypt before 1.4.9 Remote Code Execution via Pluginjahlives openssl_encrypt · openssl-encrypt
- CVE-2026-81718openssl_encrypt before 1.4.9 Weak Cryptographic Parametersjahlives openssl_encrypt
- CVE-2026-81717openssl_encrypt before 1.4.9 Integrity Bypass via Added Filesjahlives openssl_encrypt · openssl-encrypt
- CVE-2026-81716openssl_encrypt before 1.4.9 Plugin Sandbox Path Traversaljahlives openssl_encrypt · openssl-encrypt
- CVE-2026-81715openssl_encrypt before 1.4.9 Credential Exposure via Debug Outputjahlives openssl_encrypt · openssl-encrypt
- CVE-2026-81714openssl_encrypt before 1.4.9 Plugin Signing Trust Anchor Enrollment Bypassjahlives openssl_encrypt · openssl-encrypt
- CVE-2026-81707openssl_encrypt before 1.4.9 ANSI Escape Injection via Identity Emailjahlives openssl_encrypt
- CVE-2026-81706openssl_encrypt before 1.4.9 Key Substitution via Identity Shadowingjahlives openssl_encrypt · openssl-encrypt
- CVE-2026-81705openssl-encrypt before 1.4.9 Password Cleartext Leak via Debugjahlives openssl_encrypt · openssl-encrypt
- CVE-2026-81704openssl_encrypt before 1.4.9 Weak Key Derivation via D-Busjahlives openssl_encrypt · openssl-encrypt
- CVE-2026-81703openssl_encrypt before 1.4.9 Authentication Bypass via Unencrypted PQC Keyjahlives openssl_encrypt · openssl-encrypt
- CVE-2026-81702openssl_encrypt before 1.4.9 Key Substitution via Identity Loadjahlives openssl_encrypt · openssl-encrypt
- CVE-2026-81701openssl_encrypt before 1.4.9 Arbitrary Code Execution via unsigned pluginjahlives openssl_encrypt · openssl-encrypt
- CVE-2026-81700openssl_encrypt before 1.4.9 GPG Signature Verification Bypassjahlives openssl_encrypt · openssl-encrypt
- CVE-2026-81699openssl_encrypt before 1.4.9 Denial of Service via unbounded KDF costjahlives openssl_encrypt · openssl-encrypt
- CVE-2026-81698openssl_encrypt before 1.4.9 Shell Injection via info commandjahlives openssl_encrypt · openssl-encrypt
- CVE-2026-81697openssl_encrypt before 1.4.9 KDF Downgrade via CWD-relative Configurationjahlives openssl_encrypt
- CVE-2026-81696openssl_encrypt before 1.4.9 Terminal Injection via info Commandjahlives openssl_encrypt · openssl-encrypt
- CVE-2026-81695openssl_encrypt before 1.4.9 Terminal Injection via key_idjahlives openssl_encrypt · openssl-encrypt
- CVE-2026-81694openssl-encrypt before 1.4.9 Output Injection via Unsanitized Filenames in verify-usb Commandjahlives openssl_encrypt · openssl-encrypt
- CVE-2026-81693openssl_encrypt before 1.4.9 Denial of Service via QR total fieldjahlives openssl_encrypt · openssl-encrypt
- CVE-2026-81692openssl_encrypt before 1.4.9 Denial of Service via STREAMINFOjahlives openssl_encrypt
- CVE-2026-81691openssl_encrypt before 1.4.9 Credential Leakage via Unvalidated Server URLsjahlives openssl_encrypt · openssl-encrypt
- CVE-2026-81690verify-usb before 1.4.9 Symlink Directory Traversal Code Executionjahlives openssl_encrypt · openssl-encrypt
- CVE-2026-81689openssl_encrypt before 1.4.9 Weak Pepper Key Derivationjahlives openssl_encrypt · openssl-encrypt
- CVE-2026-81688openssl_encrypt before 1.4.9 Plaintext Confirmation Oracle via SHA-256jahlives openssl_encrypt · openssl-encrypt
- CVE-2026-81687openssl_encrypt before 1.4.9 Denial of Service via KDFjahlives openssl_encrypt
- CVE-2026-81686openssl_encrypt before 1.4.9 D-Bus Properties Authorization Bypassjahlives openssl_encrypt · openssl-encrypt
- CVE-2026-81685openssl_encrypt before 1.4.9 Text Injection via Recovery Slot Metadatajahlives openssl_encrypt · openssl-encrypt
- CVE-2026-81684openssl_encrypt before 1.4.9 Information Disclosure via Command Linejahlives openssl_encrypt · openssl-encrypt
- CVE-2026-81683openssl_encrypt before 1.4.9 Plaintext Private Key Storagejahlives openssl_encrypt · openssl-encrypt
- CVE-2026-81682openssl_encrypt before 1.4.9 Insecure File Permissionsjahlives openssl_encrypt
- CVE-2026-81681openssl_encrypt before 1.4.9 False Encryption via Cleartext Storagejahlives openssl_encrypt · openssl-encrypt
- CVE-2026-81680openssl_encrypt before 1.4.9 Authentication Bypass via Recovery Slot Removaljahlives openssl_encrypt · openssl-encrypt
- CVE-2026-75803AEAD Forgeries with Empty Ciphertext When Using EVP_Cipher()OpenSSL
- CVE-2026-63076Invalid Pointer Dereference in CMP Server via Crafted protectionAlgOpenSSL
- CVE-2026-63075QUIC ACK-only Packet Retention Can Cause Memory ExhaustionOpenSSL
- CVE-2026-63074CMP Indefinite Cache Growth of ExtraCertsOpenSSL
- CVE-2026-63073Untrusted Sender DN Used as Format String in CMP Response ValidationOpenSSL
- CVE-2026-63072Heap Buffer Overflow in CMS Key UnwrappingOpenSSL
- CVE-2026-54874Excessive Memory Use Buffering DTLS Records for a Future EpochOpenSSL
- CVE-2026-18798QUIC Server May Trigger Double Free When Processing INITIAL PacketOpenSSL
- CVE-2026-14457RPK Server Signature Algorithm Selection Can Dereference a Missing CertificateOpenSSL
- CVE-2026-74901openssl_encrypt before 1.4.0 Authentication Bypass via AES-CTR Fallbackjahlives openssl_encrypt · openssl-encrypt
- CVE-2026-74900openssl_encrypt before 1.4.0 Weak Shared Secret via PQC Simulation Modejahlives openssl_encrypt · openssl-encrypt
- CVE-2026-74899openssl_encrypt before 1.4.0 Sandbox Escape via Type Hierarchyjahlives openssl_encrypt · openssl-encrypt
- CVE-2026-74896openssl_encrypt before 1.4.0 Sandbox Escape via Dunder Attribute Traversaljahlives openssl_encrypt · openssl-encrypt
- CVE-2026-74895openssl_encrypt before 1.4.0 Plugin Sandbox Bypass via Process Isolationjahlives openssl_encrypt · openssl-encrypt
- CVE-2026-74894openssl_encrypt before 1.4.0 Authentication Bypass via Bearer Tokenjahlives openssl_encrypt · openssl-encrypt
- CVE-2026-74893openssl_encrypt before 1.4.0 JWT Token Forgery via Hardcoded Secretsjahlives openssl_encrypt · openssl-encrypt
- CVE-2026-74892openssl_encrypt before 1.4.0 Hardcoded Secret Keyjahlives openssl_encrypt · openssl-encrypt
- CVE-2026-74891openssl_encrypt before 1.4.0 Hardcoded Database Credentialsjahlives openssl_encrypt · openssl-encrypt
- CVE-2026-74890openssl_encrypt before 1.4.0 HMAC Authentication Bypass via Environment Variablejahlives openssl_encrypt · openssl-encrypt
- CVE-2026-74889openssl_encrypt before 1.4.0 Weak Key Derivation via HKDFjahlives openssl_encrypt · openssl-encrypt
- CVE-2026-74888openssl_encrypt before 1.4.0 Non-Standard PBKDF2 Key Derivationjahlives openssl_encrypt · openssl-encrypt
- CVE-2026-74887openssl_encrypt before 1.4.0 Insecure Random Import in PQC Modulejahlives openssl_encrypt · openssl-encrypt
- CVE-2026-74886openssl_encrypt before 1.4.0 Plugin Import Guard Bypassjahlives openssl_encrypt · openssl-encrypt
- CVE-2026-74885openssl_encrypt before 1.4.0 Logging Bug and Race Conditionjahlives openssl_encrypt · openssl-encrypt
- CVE-2026-74884openssl_encrypt before 1.4.0 Path Traversal via plugin_idjahlives openssl_encrypt · openssl-encrypt
- CVE-2026-74883openssl_encrypt before 1.4.0 Sandbox Bypass via pathlib and iojahlives openssl_encrypt · openssl-encrypt
- CVE-2026-74882openssl_encrypt before 1.4.0 Insecure Default Configurationjahlives openssl_encrypt · openssl-encrypt
- CVE-2026-74881openssl_encrypt before 1.4.0 CORS Misconfiguration via Wildcard Originsjahlives openssl_encrypt · openssl-encrypt
- CVE-2026-74880openssl_encrypt before 1.4.0 Token Leakage via Query Parametersjahlives openssl_encrypt · openssl-encrypt
- CVE-2026-74879openssl_encrypt before 1.4.0 Information Disclosure via /ready endpointjahlives openssl_encrypt · openssl-encrypt
- CVE-2026-74878openssl_encrypt before 1.4.0 TOTP Rate Limiter Bypassjahlives openssl_encrypt · openssl-encrypt
- CVE-2026-74877openssl_encrypt before 1.4.0 Missing Ownership Verification via revoke_keyjahlives openssl_encrypt · openssl-encrypt
- CVE-2026-74876openssl_encrypt before 1.4.0 Unverified Key Bundle Encryptionjahlives openssl_encrypt · openssl-encrypt
- CVE-2026-74875openssl_encrypt before 1.4.0 Schema Validation Bypassjahlives openssl_encrypt · openssl-encrypt
- CVE-2026-74874openssl_encrypt before 1.4.0 Weak PRNG Steganography Pixel Selectionjahlives openssl_encrypt · openssl-encrypt
- CVE-2026-74873openssl_encrypt before 1.4.0 Password Exposure via CLI Argumentjahlives openssl_encrypt · openssl-encrypt
- CVE-2026-74872openssl_encrypt before 1.4.0 Arbitrary Code Execution via Whirlpooljahlives openssl_encrypt · openssl-encrypt
- CVE-2026-74871openssl_encrypt before 1.4.6 KDF Bypass via Sequential-XORjahlives openssl_encrypt · openssl-encrypt
- CVE-2026-74870openssl_encrypt before 1.4.8 Hardware Pepper Information Disclosurejahlives openssl_encrypt · openssl-encrypt
- CVE-2026-14456Unbounded Memory Growth in QUIC Server Incoming Channel QueueOpenSSL
- CVE-2026-54876Client-Side Memory Leak in OCSP Response CheckingOpenSSL
- CVE-2026-45447Heap Use-After-Free in the PKCS7_verify() FunctionOpenSSL
- CVE-2026-45446Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modesOpenSSL
- CVE-2026-45445AES-OCB IV Ignored on EVP_Cipher() PathOpenSSL
- CVE-2026-42771Possible Out of Bounds Read in X509_VERIFY_PARAM_set1_email()OpenSSL
- CVE-2026-42770FFC-DH Peer Validation Uses Attacker-Supplied qOpenSSL
- CVE-2026-42769Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdateOpenSSL
- CVE-2026-42768Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt()OpenSSL
- CVE-2026-42767NULL Pointer Dereference in CRMF EncryptedValue DecryptionOpenSSL
- CVE-2026-42766Possible NULL Dereference in Password-Based CMS DecryptionOpenSSL
- CVE-2026-42765NULL Dereference in Certificate Verification with OCSP CheckingOpenSSL
- CVE-2026-42764NULL Pointer Dereference in QUIC Server Initial Packet HandlingOpenSSL
- CVE-2026-35188Double-free When Checking OCSP Stapled ResponseOpenSSL
- CVE-2026-34183Unbounded Memory Growth in the QUIC PATH_CHALLENGE HandlerOpenSSL
- CVE-2026-34182CMS AuthEnvelopedData Processing May Accept Forged MessagesOpenSSL
- CVE-2026-34181PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC KeysOpenSSL
- CVE-2026-34180Heap Buffer Over-read in ASN.1 Content ParsingOpenSSL
- CVE-2026-9076Out-of-Bounds Read in CMS Password-Based DecryptionOpenSSL
- CVE-2026-7383Possible Heap Buffer Overflow in ASN.1 Multibyte String ConversionOpenSSL
- CVE-2026-31790Incorrect Failure Handling in RSA KEM RSASVE EncapsulationOpenSSL
- CVE-2026-31789Heap Buffer Overflow in Hexadecimal ConversionOpenSSL
- CVE-2026-28390Possible NULL Dereference When Processing CMS KeyTransportRecipientInfoOpenSSL
- CVE-2026-28389Possible NULL Dereference When Processing CMS KeyAgreeRecipientInfoOpenSSL
- CVE-2026-28388NULL Pointer Dereference When Processing a Delta CRLOpenSSL
- CVE-2026-28387Potential Use-after-free in DANE Client CodeOpenSSL
- CVE-2026-28386Out-of-bounds Read in AES-CFB-128 on X86-64 with AVX-512 SupportOpenSSL
- CVE-2026-2673OpenSSL TLS 1.3 server may choose unexpected key agreement groupOpenSSL
- CVE-2026-22796ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() functionOpenSSL
- CVE-2026-22795Missing ASN1_TYPE validation in PKCS#12 parsingOpenSSL
- CVE-2025-69421NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex functionOpenSSL
- CVE-2025-69420Missing ASN1_TYPE validation in TS_RESP_verify_response() functionOpenSSL
- CVE-2025-69419Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversionOpenSSL
- CVE-2025-69418Unauthenticated/unencrypted trailing bytes with low-level OCB function callsOpenSSL
- CVE-2025-68160Heap out-of-bounds write in BIO_f_linebuffer on short writesOpenSSL
- CVE-2025-66199TLS 1.3 CompressedCertificate excessive memory allocationOpenSSL
- CVE-2025-15469'openssl dgst' one-shot codepath silently truncates inputs >16MBOpenSSL
- CVE-2025-15468NULL dereference in SSL_CIPHER_find() function on unknown cipher IDOpenSSL
- CVE-2025-15467Stack buffer overflow in CMS (Auth)EnvelopedData parsingOpenSSL
- CVE-2025-11187Improper validation of PBMAC1 parameters in PKCS#12 MAC verificationOpenSSL
- CVE-2025-9232Out-of-bounds read in HTTP client no_proxy handlingOpenSSL
- CVE-2025-9231Timing side-channel in SM2 algorithm on 64 bit ARMOpenSSL
- CVE-2025-9230Out-of-bounds read & write in RFC 3211 KEK UnwrapOpenSSL
- CVE-2023-53159The openssl crate before 0.10.55 for Rust allows an out-of-bounds read via an empty string to X509VerifyParamRef::set_host.sfackler openssl · openssl
- CVE-2025-4575The x509 application adds trusted use instead of rejected useOpenSSL
- CVE-2025-35471conda-forge openssl-feedstock writable OPENSSLDIRconda-forge openssl-feedstock · conda-forge miniforge
- CVE-2024-12797RFC7250 handshakes with unauthenticated servers don't abort as expectedOpenSSL · cryptography
- CVE-2024-13176Timing side-channel in ECDSA signature computationOpenSSL
- CVE-2024-4741Use After Free with SSL_free_buffersOpenSSL
- CVE-2024-9143Low-level invalid GF(2^m) parameters lead to OOB memory accessOpenSSL
- CVE-2024-6119Possible denial of service in X.509 name checksOpenSSL
- CVE-2024-5535SSL_select_next_proto buffer overreadOpenSSL
- CVE-2024-4603Excessive time spent checking DSA keys and parametersOpenSSL
- CVE-2023-6237Excessive time spent checking invalid RSA public keysOpenSSL
- CVE-2024-2511Unbounded memory growth with session handling in TLSv1.3OpenSSL
- CVE-2024-0727PKCS12 Decoding crashesOpenSSL · cryptography
- CVE-2023-6129POLY1305 MAC implementation corrupts vector registers on PowerPCOpenSSL
- CVE-2023-5678Excessive time spent in DH check / generation with large Q parameter valueOpenSSL
- CVE-2023-5363Incorrect cipher key & IV length processingOpenSSL
- CVE-2023-4807POLY1305 MAC implementation corrupts XMM registers on WindowsOpenSSL
- CVE-2023-3817Excessive time spent checking DH q parameter valueOpenSSL
- CVE-2023-3446Excessive time spent checking DH keys and parametersOpenSSL
- CVE-2023-2975AES-SIV implementation ignores empty associated data entriesOpenSSL
- CVE-2023-2650Possible DoS translating ASN.1 object identifiersOpenSSL
- CVE-2023-1255Input buffer over-read in AES-XTS implementation on 64 bit ARMOpenSSL
- CVE-2023-0466Certificate policy check not enabledOpenSSL
- CVE-2023-0465Invalid certificate policies in leaf certificates are silently ignoredOpenSSL
- CVE-2023-0464Excessive Resource Usage Verifying X.509 Policy ConstraintsOpenSSL
- CVE-2022-4203X.509 Name Constraints Read Buffer OverflowOpenSSL · openssl-src
- CVE-2022-4304Timing Oracle in RSA DecryptionOpenSSL · openssl-src
- CVE-2022-4450Double free after calling PEM_read_bio_exOpenSSL · openssl-src
- CVE-2023-0215Use-after-free following BIO_new_NDEFOpenSSL · openssl-src
- CVE-2023-0216Invalid pointer dereference in d2i_PKCS7 functionsOpenSSL · openssl-src
- CVE-2023-0217NULL dereference validating DSA public keyOpenSSL · openssl-src
- CVE-2023-0286X.400 address type confusion in X.509 GeneralNameOpenSSL · cryptography +1
- CVE-2023-0401NULL dereference during PKCS7 data verificationOpenSSL · openssl-src
- CVE-2022-3996X.509 Policy Constraints Double LockingOpenSSL · openssl-src
- CVE-2022-3602X.509 Email Address 4-byte Buffer OverflowOpenSSL · openssl-src
- CVE-2022-3786X.509 Email Address Variable Length Buffer OverflowOpenSSL · openssl-src
- CVE-2022-3358Using a Custom Cipher with NID_undef may lead to NULL encryptionOpenSSL · openssl-src
- CVE-2022-2097AES OCB fails to encrypt some bytesOpenSSL · openssl-src
- CVE-2022-2274RSA implementation bug in AVX512IFMA instructionsOpenSSL · openssl-src
- CVE-2022-2068The c_rehash script allows command injectionOpenSSL
- CVE-2022-1473Resource leakage when decoding certificates and keysOpenSSL · openssl-src
- CVE-2022-1434Incorrect MAC key used in the RC4-MD5 ciphersuiteOpenSSL · openssl-src
- CVE-2022-1343OCSP_basic_verify may incorrectly verify the response signing certificateOpenSSL · openssl-src
- CVE-2022-1292The c_rehash script allows command injectionOpenSSL
- CVE-2022-0778Infinite loop in BN_mod_sqrt() reachable when parsing certificatesOpenSSL · mariadb +5
- CVE-2021-4160BN_mod_exp may produce incorrect results on MIPSOpenSSL
- CVE-2021-4044Invalid handling of X509_verify_cert() internal errors in libsslOpenSSL · openssl-src
- CVE-2021-3712Read buffer overruns processing ASN.1 stringsOpenSSL · openssl-src
- CVE-2021-3711SM2 Decryption Buffer OverflowOpenSSL · openssl-src
- CVE-2021-3450CA certificate check bypass with X509_V_FLAG_X509_STRICTOpenSSL · node +2
- CVE-2021-3449NULL pointer deref in signature_algorithms processingOpenSSL · node +2
- CVE-2021-23841Null pointer deref in X509_issuer_and_serial_hash()OpenSSL · openssl-src
- CVE-2021-23840Integer overflow in CipherUpdateOpenSSL · openssl-src
- CVE-2021-23839Incorrect SSLv2 rollback protectionOpenSSL
- CVE-2020-1971EDIPARTYNAME NULL pointer dereferenceOpenSSL
- CVE-2020-1968Raccoon attackOpenSSL
- CVE-2020-1967Segmentation fault in SSL_check_chainOpenSSL · openssl-src
- CVE-2019-1551rsaz_512_sqr overflow bug on x86_64OpenSSL
- CVE-2011-4121The OpenSSL extension of Ruby (Git trunk) versions after 2011-09-01 up to 2011-11-03 always generated an exponent value of '1' to be used foOpenSSL extension of Ruby
- CVE-2019-1563Padding Oracle in PKCS7_dataDecode and CMS_decrypt_set1_pkeyOpenSSL
- CVE-2019-1549Fork ProtectionOpenSSL
- CVE-2019-1547ECDSA remote timing attackOpenSSL
- CVE-2019-1552Windows builds with insecure path defaultsOpenSSL
- CVE-2019-1543ChaCha20-Poly1305 with long noncesOpenSSL
- CVE-2019-15590-byte record padding oracleOpenSSL
- CVE-2018-0734Timing attack against DSAOpenSSL
- CVE-2018-0735Timing attack against ECDSA signature generationOpenSSL
- CVE-2016-7056A timing attack flaw was found in OpenSSL 1.0.1u and before that could allow a malicious user with local access to recover ECDSA P-256 privaThe OpenSSL Project openssl