# cve.now: OpenSSL

The newest entries affecting OpenSSL (up to 200). Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-84784](https://cve.now/CVE-2026-84784.md): QUIC: Unbounded RETIRE\_CONNECTION\_ID Backlog (CVSS 7.5, OpenSSL)
- [CVE-2026-84783](https://cve.now/CVE-2026-84783.md): Use-After-Free in X.509 Extension Cache Under Concurrent Use (CVSS 7.5, OpenSSL)
- [CVE-2026-84782](https://cve.now/CVE-2026-84782.md): DTLS Retransmits Handshake Messages From a Stale Buffer Offset (CVSS 8.2, OpenSSL)
- [CVE-2026-77696](https://cve.now/CVE-2026-77696.md): Timing Side-Channel in SM2 Signature Generation (CVSS 3.7, OpenSSL)
- [CVE-2026-75806](https://cve.now/CVE-2026-75806.md): Unauthenticated and Undersized DTLS 1.2 AEAD Record Causes DoS (CVSS 5.3, OpenSSL)
- [CVE-2026-75805](https://cve.now/CVE-2026-75805.md): NULL Pointer Dereference in CMP Client Revocation Response Handling (CVSS 5.3, OpenSSL)
- [CVE-2026-75804](https://cve.now/CVE-2026-75804.md): QUIC Connection-Level Flow Control is Not Enforced for Streams (CVSS 5.3, OpenSSL)
- [CVE-2026-72897](https://cve.now/CVE-2026-72897.md): Out-of-Bounds Access After SSL\_set\_SSL\_CTX() During a Handshake (CVSS 7.5, OpenSSL)
- [CVE-2026-54875](https://cve.now/CVE-2026-54875.md): Non-Constant-Time SM2 Scalar Multiplication on ARM64 and RISC-V (CVSS 3.7, OpenSSL)
- [CVE-2026-54873](https://cve.now/CVE-2026-54873.md): QUIC STREAM Fragment Metadata DoS (CVSS 7.5, OpenSSL)
- [CVE-2026-54872](https://cve.now/CVE-2026-54872.md): Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves (CVSS 3.7, OpenSSL)
- [CVE-2026-42772](https://cve.now/CVE-2026-42772.md): Potential CPU DoS via O(n^2) Fragment Reassembly in QUIC (CVSS 5.3, OpenSSL)
- [CVE-2026-35191](https://cve.now/CVE-2026-35191.md): QUIC Unvalidated Amplification Credit may be Over Accounted (CVSS 3.7, OpenSSL)
- [CVE-2026-35189](https://cve.now/CVE-2026-35189.md): Excessive Memory Allocation in Relative CRLDP Processing (CVSS 5.3, OpenSSL)
- [CVE-2026-81721](https://cve.now/CVE-2026-81721.md): openssl\_encrypt before 1.4.9 Denial of Service via KDF (CVSS 8.7, jahlives openssl\_encrypt · openssl-encrypt)
- [CVE-2026-81720](https://cve.now/CVE-2026-81720.md): openssl\_encrypt before 1.4.9 Denial of Service via Unbounded Argon2 (CVSS 6.9, jahlives openssl\_encrypt · openssl-encrypt)
- [CVE-2026-81719](https://cve.now/CVE-2026-81719.md): openssl\_encrypt before 1.4.9 Remote Code Execution via Plugin (CVSS 9.3, jahlives openssl\_encrypt · openssl-encrypt)
- [CVE-2026-81718](https://cve.now/CVE-2026-81718.md): openssl\_encrypt before 1.4.9 Weak Cryptographic Parameters (CVSS 8.7, jahlives openssl\_encrypt)
- [CVE-2026-81717](https://cve.now/CVE-2026-81717.md): openssl\_encrypt before 1.4.9 Integrity Bypass via Added Files (CVSS 9.3, jahlives openssl\_encrypt · openssl-encrypt)
- [CVE-2026-81716](https://cve.now/CVE-2026-81716.md): openssl\_encrypt before 1.4.9 Plugin Sandbox Path Traversal (CVSS 8.7, jahlives openssl\_encrypt · openssl-encrypt)
- [CVE-2026-81715](https://cve.now/CVE-2026-81715.md): openssl\_encrypt before 1.4.9 Credential Exposure via Debug Output (CVSS 8.7, jahlives openssl\_encrypt · openssl-encrypt)
- [CVE-2026-81714](https://cve.now/CVE-2026-81714.md): openssl\_encrypt before 1.4.9 Plugin Signing Trust Anchor Enrollment Bypass (CVSS 9.3, jahlives openssl\_encrypt · openssl-encrypt)
- [CVE-2026-81707](https://cve.now/CVE-2026-81707.md): openssl\_encrypt before 1.4.9 ANSI Escape Injection via Identity Email (CVSS 9.3, jahlives openssl\_encrypt)
- [CVE-2026-81706](https://cve.now/CVE-2026-81706.md): openssl\_encrypt before 1.4.9 Key Substitution via Identity Shadowing (CVSS 9.3, jahlives openssl\_encrypt · openssl-encrypt)
- [CVE-2026-81705](https://cve.now/CVE-2026-81705.md): openssl-encrypt before 1.4.9 Password Cleartext Leak via Debug (CVSS 8.7, jahlives openssl\_encrypt · openssl-encrypt)
- [CVE-2026-81704](https://cve.now/CVE-2026-81704.md): openssl\_encrypt before 1.4.9 Weak Key Derivation via D-Bus (CVSS 8.7, jahlives openssl\_encrypt · openssl-encrypt)
- [CVE-2026-81703](https://cve.now/CVE-2026-81703.md): openssl\_encrypt before 1.4.9 Authentication Bypass via Unencrypted PQC Key (CVSS 8.7, jahlives openssl\_encrypt · openssl-encrypt)
- [CVE-2026-81702](https://cve.now/CVE-2026-81702.md): openssl\_encrypt before 1.4.9 Key Substitution via Identity Load (CVSS 9.3, jahlives openssl\_encrypt · openssl-encrypt)
- [CVE-2026-81701](https://cve.now/CVE-2026-81701.md): openssl\_encrypt before 1.4.9 Arbitrary Code Execution via unsigned plugin (CVSS 9.3, jahlives openssl\_encrypt · openssl-encrypt)
- [CVE-2026-81700](https://cve.now/CVE-2026-81700.md): openssl\_encrypt before 1.4.9 GPG Signature Verification Bypass (CVSS 9.3, jahlives openssl\_encrypt · openssl-encrypt)
- [CVE-2026-81699](https://cve.now/CVE-2026-81699.md): openssl\_encrypt before 1.4.9 Denial of Service via unbounded KDF cost (CVSS 8.7, jahlives openssl\_encrypt · openssl-encrypt)
- [CVE-2026-81698](https://cve.now/CVE-2026-81698.md): openssl\_encrypt before 1.4.9 Shell Injection via info command (CVSS 9.3, jahlives openssl\_encrypt · openssl-encrypt)
- [CVE-2026-81697](https://cve.now/CVE-2026-81697.md): openssl\_encrypt before 1.4.9 KDF Downgrade via CWD-relative Configuration (CVSS 8.7, jahlives openssl\_encrypt)
- [CVE-2026-81696](https://cve.now/CVE-2026-81696.md): openssl\_encrypt before 1.4.9 Terminal Injection via info Command (CVSS 9.3, jahlives openssl\_encrypt · openssl-encrypt)
- [CVE-2026-81695](https://cve.now/CVE-2026-81695.md): openssl\_encrypt before 1.4.9 Terminal Injection via key\_id (CVSS 9.3, jahlives openssl\_encrypt · openssl-encrypt)
- [CVE-2026-81694](https://cve.now/CVE-2026-81694.md): openssl-encrypt before 1.4.9 Output Injection via Unsanitized Filenames in verify-usb Command (CVSS 9.3, jahlives openssl\_encrypt · openssl-encrypt)
- [CVE-2026-81693](https://cve.now/CVE-2026-81693.md): openssl\_encrypt before 1.4.9 Denial of Service via QR total field (CVSS 8.7, jahlives openssl\_encrypt · openssl-encrypt)
- [CVE-2026-81692](https://cve.now/CVE-2026-81692.md): openssl\_encrypt before 1.4.9 Denial of Service via STREAMINFO (CVSS 8.7, jahlives openssl\_encrypt)
- [CVE-2026-81691](https://cve.now/CVE-2026-81691.md): openssl\_encrypt before 1.4.9 Credential Leakage via Unvalidated Server URLs (CVSS 8.7, jahlives openssl\_encrypt · openssl-encrypt)
- [CVE-2026-81690](https://cve.now/CVE-2026-81690.md): verify-usb before 1.4.9 Symlink Directory Traversal Code Execution (CVSS 8.7, jahlives openssl\_encrypt · openssl-encrypt)
- [CVE-2026-81689](https://cve.now/CVE-2026-81689.md): openssl\_encrypt before 1.4.9 Weak Pepper Key Derivation (CVSS 8.7, jahlives openssl\_encrypt · openssl-encrypt)
- [CVE-2026-81688](https://cve.now/CVE-2026-81688.md): openssl\_encrypt before 1.4.9 Plaintext Confirmation Oracle via SHA-256 (CVSS 8.7, jahlives openssl\_encrypt · openssl-encrypt)
- [CVE-2026-81687](https://cve.now/CVE-2026-81687.md): openssl\_encrypt before 1.4.9 Denial of Service via KDF (CVSS 8.7, jahlives openssl\_encrypt)
- [CVE-2026-81686](https://cve.now/CVE-2026-81686.md): openssl\_encrypt before 1.4.9 D-Bus Properties Authorization Bypass (CVSS 6.9, jahlives openssl\_encrypt · openssl-encrypt)
- [CVE-2026-81685](https://cve.now/CVE-2026-81685.md): openssl\_encrypt before 1.4.9 Text Injection via Recovery Slot Metadata (CVSS 9.3, jahlives openssl\_encrypt · openssl-encrypt)
- [CVE-2026-81684](https://cve.now/CVE-2026-81684.md): openssl\_encrypt before 1.4.9 Information Disclosure via Command Line (CVSS 6.9, jahlives openssl\_encrypt · openssl-encrypt)
- [CVE-2026-81683](https://cve.now/CVE-2026-81683.md): openssl\_encrypt before 1.4.9 Plaintext Private Key Storage (CVSS 8.6, jahlives openssl\_encrypt · openssl-encrypt)
- [CVE-2026-81682](https://cve.now/CVE-2026-81682.md): openssl\_encrypt before 1.4.9 Insecure File Permissions (CVSS 8.6, jahlives openssl\_encrypt)
- [CVE-2026-81681](https://cve.now/CVE-2026-81681.md): openssl\_encrypt before 1.4.9 False Encryption via Cleartext Storage (CVSS 9.3, jahlives openssl\_encrypt · openssl-encrypt)
- [CVE-2026-81680](https://cve.now/CVE-2026-81680.md): openssl\_encrypt before 1.4.9 Authentication Bypass via Recovery Slot Removal (CVSS 9.3, jahlives openssl\_encrypt · openssl-encrypt)
- [CVE-2026-75803](https://cve.now/CVE-2026-75803.md): AEAD Forgeries with Empty Ciphertext When Using EVP\_Cipher() (CVSS 9.1, OpenSSL)
- [CVE-2026-63076](https://cve.now/CVE-2026-63076.md): Invalid Pointer Dereference in CMP Server via Crafted protectionAlg (CVSS 7.5, OpenSSL)
- [CVE-2026-63075](https://cve.now/CVE-2026-63075.md): QUIC ACK-only Packet Retention Can Cause Memory Exhaustion (CVSS 7.5, OpenSSL)
- [CVE-2026-63074](https://cve.now/CVE-2026-63074.md): CMP Indefinite Cache Growth of ExtraCerts (CVSS 5.9, OpenSSL)
- [CVE-2026-63073](https://cve.now/CVE-2026-63073.md): Untrusted Sender DN Used as Format String in CMP Response Validation (CVSS 9.8, OpenSSL)
- [CVE-2026-63072](https://cve.now/CVE-2026-63072.md): Heap Buffer Overflow in CMS Key Unwrapping (CVSS 7.5, OpenSSL)
- [CVE-2026-54874](https://cve.now/CVE-2026-54874.md): Excessive Memory Use Buffering DTLS Records for a Future Epoch (CVSS 7.5, OpenSSL)
- [CVE-2026-18798](https://cve.now/CVE-2026-18798.md): QUIC Server May Trigger Double Free When Processing INITIAL Packet (CVSS 7.5, OpenSSL)
- [CVE-2026-14457](https://cve.now/CVE-2026-14457.md): RPK Server Signature Algorithm Selection Can Dereference a Missing Certificate (CVSS 7.5, OpenSSL)
- [CVE-2026-74901](https://cve.now/CVE-2026-74901.md): openssl\_encrypt before 1.4.0 Authentication Bypass via AES-CTR Fallback (CVSS 9.3, jahlives openssl\_encrypt · openssl-encrypt)
- [CVE-2026-74900](https://cve.now/CVE-2026-74900.md): openssl\_encrypt before 1.4.0 Weak Shared Secret via PQC Simulation Mode (CVSS 9.3, jahlives openssl\_encrypt · openssl-encrypt)
- [CVE-2026-74899](https://cve.now/CVE-2026-74899.md): openssl\_encrypt before 1.4.0 Sandbox Escape via Type Hierarchy (CVSS 9.3, jahlives openssl\_encrypt · openssl-encrypt)
- [CVE-2026-74896](https://cve.now/CVE-2026-74896.md): openssl\_encrypt before 1.4.0 Sandbox Escape via Dunder Attribute Traversal (CVSS 9.3, jahlives openssl\_encrypt · openssl-encrypt)
- [CVE-2026-74895](https://cve.now/CVE-2026-74895.md): openssl\_encrypt before 1.4.0 Plugin Sandbox Bypass via Process Isolation (CVSS 9.3, jahlives openssl\_encrypt · openssl-encrypt)
- [CVE-2026-74894](https://cve.now/CVE-2026-74894.md): openssl\_encrypt before 1.4.0 Authentication Bypass via Bearer Token (CVSS 9.3, jahlives openssl\_encrypt · openssl-encrypt)
- [CVE-2026-74893](https://cve.now/CVE-2026-74893.md): openssl\_encrypt before 1.4.0 JWT Token Forgery via Hardcoded Secrets (CVSS 8.7, jahlives openssl\_encrypt · openssl-encrypt)
- [CVE-2026-74892](https://cve.now/CVE-2026-74892.md): openssl\_encrypt before 1.4.0 Hardcoded Secret Key (CVSS 8.7, jahlives openssl\_encrypt · openssl-encrypt)
- [CVE-2026-74891](https://cve.now/CVE-2026-74891.md): openssl\_encrypt before 1.4.0 Hardcoded Database Credentials (CVSS 8.7, jahlives openssl\_encrypt · openssl-encrypt)
- [CVE-2026-74890](https://cve.now/CVE-2026-74890.md): openssl\_encrypt before 1.4.0 HMAC Authentication Bypass via Environment Variable (CVSS 9.3, jahlives openssl\_encrypt · openssl-encrypt)
- [CVE-2026-74889](https://cve.now/CVE-2026-74889.md): openssl\_encrypt before 1.4.0 Weak Key Derivation via HKDF (CVSS 9.3, jahlives openssl\_encrypt · openssl-encrypt)
- [CVE-2026-74888](https://cve.now/CVE-2026-74888.md): openssl\_encrypt before 1.4.0 Non-Standard PBKDF2 Key Derivation (CVSS 8.7, jahlives openssl\_encrypt · openssl-encrypt)
- [CVE-2026-74887](https://cve.now/CVE-2026-74887.md): openssl\_encrypt before 1.4.0 Insecure Random Import in PQC Module (CVSS 6.3, jahlives openssl\_encrypt · openssl-encrypt)
- [CVE-2026-74886](https://cve.now/CVE-2026-74886.md): openssl\_encrypt before 1.4.0 Plugin Import Guard Bypass (CVSS 9.3, jahlives openssl\_encrypt · openssl-encrypt)
- [CVE-2026-74885](https://cve.now/CVE-2026-74885.md): openssl\_encrypt before 1.4.0 Logging Bug and Race Condition (CVSS 9.3, jahlives openssl\_encrypt · openssl-encrypt)
- [CVE-2026-74884](https://cve.now/CVE-2026-74884.md): openssl\_encrypt before 1.4.0 Path Traversal via plugin\_id (CVSS 8.7, jahlives openssl\_encrypt · openssl-encrypt)
- [CVE-2026-74883](https://cve.now/CVE-2026-74883.md): openssl\_encrypt before 1.4.0 Sandbox Bypass via pathlib and io (CVSS 8.7, jahlives openssl\_encrypt · openssl-encrypt)
- [CVE-2026-74882](https://cve.now/CVE-2026-74882.md): openssl\_encrypt before 1.4.0 Insecure Default Configuration (CVSS 8.7, jahlives openssl\_encrypt · openssl-encrypt)
- [CVE-2026-74881](https://cve.now/CVE-2026-74881.md): openssl\_encrypt before 1.4.0 CORS Misconfiguration via Wildcard Origins (CVSS 7.1, jahlives openssl\_encrypt · openssl-encrypt)
- [CVE-2026-74880](https://cve.now/CVE-2026-74880.md): openssl\_encrypt before 1.4.0 Token Leakage via Query Parameters (CVSS 9.3, jahlives openssl\_encrypt · openssl-encrypt)
- [CVE-2026-74879](https://cve.now/CVE-2026-74879.md): openssl\_encrypt before 1.4.0 Information Disclosure via /ready endpoint (CVSS 8.7, jahlives openssl\_encrypt · openssl-encrypt)
- [CVE-2026-74878](https://cve.now/CVE-2026-74878.md): openssl\_encrypt before 1.4.0 TOTP Rate Limiter Bypass (CVSS 9.3, jahlives openssl\_encrypt · openssl-encrypt)
- [CVE-2026-74877](https://cve.now/CVE-2026-74877.md): openssl\_encrypt before 1.4.0 Missing Ownership Verification via revoke\_key (CVSS 8.7, jahlives openssl\_encrypt · openssl-encrypt)
- [CVE-2026-74876](https://cve.now/CVE-2026-74876.md): openssl\_encrypt before 1.4.0 Unverified Key Bundle Encryption (CVSS 9.3, jahlives openssl\_encrypt · openssl-encrypt)
- [CVE-2026-74875](https://cve.now/CVE-2026-74875.md): openssl\_encrypt before 1.4.0 Schema Validation Bypass (CVSS 9.3, jahlives openssl\_encrypt · openssl-encrypt)
- [CVE-2026-74874](https://cve.now/CVE-2026-74874.md): openssl\_encrypt before 1.4.0 Weak PRNG Steganography Pixel Selection (CVSS 8.7, jahlives openssl\_encrypt · openssl-encrypt)
- [CVE-2026-74873](https://cve.now/CVE-2026-74873.md): openssl\_encrypt before 1.4.0 Password Exposure via CLI Argument (CVSS 8.7, jahlives openssl\_encrypt · openssl-encrypt)
- [CVE-2026-74872](https://cve.now/CVE-2026-74872.md): openssl\_encrypt before 1.4.0 Arbitrary Code Execution via Whirlpool (CVSS 9.3, jahlives openssl\_encrypt · openssl-encrypt)
- [CVE-2026-74871](https://cve.now/CVE-2026-74871.md): openssl\_encrypt before 1.4.6 KDF Bypass via Sequential-XOR (CVSS 6.9, jahlives openssl\_encrypt · openssl-encrypt)
- [CVE-2026-74870](https://cve.now/CVE-2026-74870.md): openssl\_encrypt before 1.4.8 Hardware Pepper Information Disclosure (CVSS 8.7, jahlives openssl\_encrypt · openssl-encrypt)
- [CVE-2026-14456](https://cve.now/CVE-2026-14456.md): Unbounded Memory Growth in QUIC Server Incoming Channel Queue (CVSS 7.5, OpenSSL)
- [CVE-2026-54876](https://cve.now/CVE-2026-54876.md): Client-Side Memory Leak in OCSP Response Checking (CVSS 7.5, OpenSSL)
- [CVE-2026-45447](https://cve.now/CVE-2026-45447.md): Heap Use-After-Free in the PKCS7\_verify() Function (CVSS 8.8, OpenSSL)
- [CVE-2026-45446](https://cve.now/CVE-2026-45446.md): Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes (CVSS 4.8, OpenSSL)
- [CVE-2026-45445](https://cve.now/CVE-2026-45445.md): AES-OCB IV Ignored on EVP\_Cipher() Path (CVSS 7.5, OpenSSL)
- [CVE-2026-42771](https://cve.now/CVE-2026-42771.md): Possible Out of Bounds Read in X509\_VERIFY\_PARAM\_set1\_email() (CVSS 6.2, OpenSSL)
- [CVE-2026-42770](https://cve.now/CVE-2026-42770.md): FFC-DH Peer Validation Uses Attacker-Supplied q (CVSS 3.7, OpenSSL)
- [CVE-2026-42769](https://cve.now/CVE-2026-42769.md): Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate (CVSS 5.3, OpenSSL)
- [CVE-2026-42768](https://cve.now/CVE-2026-42768.md): Multi-RecipientInfo Bleichenbacher Oracle in CMS\_decrypt() and PKCS7\_decrypt() (CVSS 3.7, OpenSSL)
- [CVE-2026-42767](https://cve.now/CVE-2026-42767.md): NULL Pointer Dereference in CRMF EncryptedValue Decryption (CVSS 5.9, OpenSSL)
- [CVE-2026-42766](https://cve.now/CVE-2026-42766.md): Possible NULL Dereference in Password-Based CMS Decryption (CVSS 5.9, OpenSSL)
- [CVE-2026-42765](https://cve.now/CVE-2026-42765.md): NULL Dereference in Certificate Verification with OCSP Checking (CVSS 7.5, OpenSSL)
- [CVE-2026-42764](https://cve.now/CVE-2026-42764.md): NULL Pointer Dereference in QUIC Server Initial Packet Handling (CVSS 7.5, OpenSSL)
- [CVE-2026-35188](https://cve.now/CVE-2026-35188.md): Double-free When Checking OCSP Stapled Response (CVSS 5.0, OpenSSL)
- [CVE-2026-34183](https://cve.now/CVE-2026-34183.md): Unbounded Memory Growth in the QUIC PATH\_CHALLENGE Handler (CVSS 7.5, OpenSSL)
- [CVE-2026-34182](https://cve.now/CVE-2026-34182.md): CMS AuthEnvelopedData Processing May Accept Forged Messages (CVSS 9.1, OpenSSL)
- [CVE-2026-34181](https://cve.now/CVE-2026-34181.md): PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys (CVSS 7.4, OpenSSL)
- [CVE-2026-34180](https://cve.now/CVE-2026-34180.md): Heap Buffer Over-read in ASN.1 Content Parsing (CVSS 7.5, OpenSSL)
- [CVE-2026-9076](https://cve.now/CVE-2026-9076.md): Out-of-Bounds Read in CMS Password-Based Decryption (CVSS 7.5, OpenSSL)
- [CVE-2026-7383](https://cve.now/CVE-2026-7383.md): Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion (CVSS 8.1, OpenSSL)
- [CVE-2026-31790](https://cve.now/CVE-2026-31790.md): Incorrect Failure Handling in RSA KEM RSASVE Encapsulation (CVSS 7.5, OpenSSL)
- [CVE-2026-31789](https://cve.now/CVE-2026-31789.md): Heap Buffer Overflow in Hexadecimal Conversion (CVSS 5.8, OpenSSL)
- [CVE-2026-28390](https://cve.now/CVE-2026-28390.md): Possible NULL Dereference When Processing CMS KeyTransportRecipientInfo (CVSS 7.5, OpenSSL)
- [CVE-2026-28389](https://cve.now/CVE-2026-28389.md): Possible NULL Dereference When Processing CMS KeyAgreeRecipientInfo (CVSS 7.5, OpenSSL)
- [CVE-2026-28388](https://cve.now/CVE-2026-28388.md): NULL Pointer Dereference When Processing a Delta CRL (CVSS 7.5, OpenSSL)
- [CVE-2026-28387](https://cve.now/CVE-2026-28387.md): Potential Use-after-free in DANE Client Code (CVSS 8.1, OpenSSL)
- [CVE-2026-28386](https://cve.now/CVE-2026-28386.md): Out-of-bounds Read in AES-CFB-128 on X86-64 with AVX-512 Support (CVSS 9.1, OpenSSL)
- [CVE-2026-2673](https://cve.now/CVE-2026-2673.md): OpenSSL TLS 1.3 server may choose unexpected key agreement group (CVSS 6.5, OpenSSL)
- [CVE-2026-22796](https://cve.now/CVE-2026-22796.md): ASN1\_TYPE Type Confusion in the PKCS7\_digest\_from\_attributes() function (CVSS 5.3, OpenSSL)
- [CVE-2026-22795](https://cve.now/CVE-2026-22795.md): Missing ASN1\_TYPE validation in PKCS#12 parsing (CVSS 5.5, OpenSSL)
- [CVE-2025-69421](https://cve.now/CVE-2025-69421.md): NULL Pointer Dereference in PKCS12\_item\_decrypt\_d2i\_ex function (CVSS 7.5, OpenSSL)
- [CVE-2025-69420](https://cve.now/CVE-2025-69420.md): Missing ASN1\_TYPE validation in TS\_RESP\_verify\_response() function (CVSS 7.5, OpenSSL)
- [CVE-2025-69419](https://cve.now/CVE-2025-69419.md): Out of bounds write in PKCS12\_get\_friendlyname() UTF-8 conversion (CVSS 7.4, OpenSSL)
- [CVE-2025-69418](https://cve.now/CVE-2025-69418.md): Unauthenticated/unencrypted trailing bytes with low-level OCB function calls (CVSS 4.0, OpenSSL)
- [CVE-2025-68160](https://cve.now/CVE-2025-68160.md): Heap out-of-bounds write in BIO\_f\_linebuffer on short writes (CVSS 4.7, OpenSSL)
- [CVE-2025-66199](https://cve.now/CVE-2025-66199.md): TLS 1.3 CompressedCertificate excessive memory allocation (CVSS 5.9, OpenSSL)
- [CVE-2025-15469](https://cve.now/CVE-2025-15469.md): 'openssl dgst' one-shot codepath silently truncates inputs \>16MB (CVSS 5.5, OpenSSL)
- [CVE-2025-15468](https://cve.now/CVE-2025-15468.md): NULL dereference in SSL\_CIPHER\_find() function on unknown cipher ID (CVSS 5.9, OpenSSL)
- [CVE-2025-15467](https://cve.now/CVE-2025-15467.md): Stack buffer overflow in CMS (Auth)EnvelopedData parsing (CVSS 8.8, OpenSSL)
- [CVE-2025-11187](https://cve.now/CVE-2025-11187.md): Improper validation of PBMAC1 parameters in PKCS#12 MAC verification (CVSS 6.1, OpenSSL)
- [CVE-2025-9232](https://cve.now/CVE-2025-9232.md): Out-of-bounds read in HTTP client no\_proxy handling (CVSS 5.9, OpenSSL)
- [CVE-2025-9231](https://cve.now/CVE-2025-9231.md): Timing side-channel in SM2 algorithm on 64 bit ARM (CVSS 6.5, OpenSSL)
- [CVE-2025-9230](https://cve.now/CVE-2025-9230.md): Out-of-bounds read & write in RFC 3211 KEK Unwrap (CVSS 7.5, OpenSSL)
- [CVE-2023-53159](https://cve.now/CVE-2023-53159.md): The openssl crate before 0.10.55 for Rust allows an out-of-bounds read via an empty string to X509VerifyParamRef::set\_host. (CVSS 4.5, sfackler openssl · openssl)
- [CVE-2025-4575](https://cve.now/CVE-2025-4575.md): The x509 application adds trusted use instead of rejected use (CVSS 6.5, OpenSSL)
- [CVE-2025-35471](https://cve.now/CVE-2025-35471.md): conda-forge openssl-feedstock writable OPENSSLDIR (CVSS 7.3, conda-forge openssl-feedstock · conda-forge miniforge)
- [CVE-2024-12797](https://cve.now/CVE-2024-12797.md): RFC7250 handshakes with unauthenticated servers don't abort as expected (CVSS 6.3, OpenSSL · cryptography)
- [CVE-2024-13176](https://cve.now/CVE-2024-13176.md): Timing side-channel in ECDSA signature computation (CVSS 4.1, OpenSSL)
- [CVE-2024-4741](https://cve.now/CVE-2024-4741.md): Use After Free with SSL\_free\_buffers (CVSS 7.5, OpenSSL)
- [CVE-2024-9143](https://cve.now/CVE-2024-9143.md): Low-level invalid GF(2^m) parameters lead to OOB memory access (CVSS 4.3, OpenSSL)
- [CVE-2024-6119](https://cve.now/CVE-2024-6119.md): Possible denial of service in X.509 name checks (CVSS 7.5, OpenSSL)
- [CVE-2024-5535](https://cve.now/CVE-2024-5535.md): SSL\_select\_next\_proto buffer overread (CVSS 9.1, OpenSSL)
- [CVE-2024-4603](https://cve.now/CVE-2024-4603.md): Excessive time spent checking DSA keys and parameters (CVSS 5.3, OpenSSL)
- [CVE-2023-6237](https://cve.now/CVE-2023-6237.md): Excessive time spent checking invalid RSA public keys (CVSS 5.9, OpenSSL)
- [CVE-2024-2511](https://cve.now/CVE-2024-2511.md): Unbounded memory growth with session handling in TLSv1.3 (CVSS 5.9, OpenSSL)
- [CVE-2024-0727](https://cve.now/CVE-2024-0727.md): PKCS12 Decoding crashes (CVSS 5.5, OpenSSL · cryptography)
- [CVE-2023-6129](https://cve.now/CVE-2023-6129.md): POLY1305 MAC implementation corrupts vector registers on PowerPC (CVSS 6.5, OpenSSL)
- [CVE-2023-5678](https://cve.now/CVE-2023-5678.md): Excessive time spent in DH check / generation with large Q parameter value (CVSS 5.3, OpenSSL)
- [CVE-2023-5363](https://cve.now/CVE-2023-5363.md): Incorrect cipher key & IV length processing (CVSS 7.5, OpenSSL)
- [CVE-2023-4807](https://cve.now/CVE-2023-4807.md): POLY1305 MAC implementation corrupts XMM registers on Windows (CVSS 7.8, OpenSSL)
- [CVE-2023-3817](https://cve.now/CVE-2023-3817.md): Excessive time spent checking DH q parameter value (CVSS 5.3, OpenSSL)
- [CVE-2023-3446](https://cve.now/CVE-2023-3446.md): Excessive time spent checking DH keys and parameters (CVSS 5.3, OpenSSL)
- [CVE-2023-2975](https://cve.now/CVE-2023-2975.md): AES-SIV implementation ignores empty associated data entries (CVSS 5.3, OpenSSL)
- [CVE-2023-2650](https://cve.now/CVE-2023-2650.md): Possible DoS translating ASN.1 object identifiers (CVSS 6.5, OpenSSL)
- [CVE-2023-1255](https://cve.now/CVE-2023-1255.md): Input buffer over-read in AES-XTS implementation on 64 bit ARM (CVSS 5.9, OpenSSL)
- [CVE-2023-0466](https://cve.now/CVE-2023-0466.md): Certificate policy check not enabled (CVSS 5.3, OpenSSL)
- [CVE-2023-0465](https://cve.now/CVE-2023-0465.md): Invalid certificate policies in leaf certificates are silently ignored (CVSS 5.3, OpenSSL)
- [CVE-2023-0464](https://cve.now/CVE-2023-0464.md): Excessive Resource Usage Verifying X.509 Policy Constraints (CVSS 7.5, OpenSSL)
- [CVE-2022-4203](https://cve.now/CVE-2022-4203.md): X.509 Name Constraints Read Buffer Overflow (CVSS 4.9, OpenSSL · openssl-src)
- [CVE-2022-4304](https://cve.now/CVE-2022-4304.md): Timing Oracle in RSA Decryption (CVSS 5.9, OpenSSL · openssl-src)
- [CVE-2022-4450](https://cve.now/CVE-2022-4450.md): Double free after calling PEM\_read\_bio\_ex (CVSS 7.5, OpenSSL · openssl-src)
- [CVE-2023-0215](https://cve.now/CVE-2023-0215.md): Use-after-free following BIO\_new\_NDEF (CVSS 7.5, OpenSSL · openssl-src)
- [CVE-2023-0216](https://cve.now/CVE-2023-0216.md): Invalid pointer dereference in d2i\_PKCS7 functions (CVSS 7.5, OpenSSL · openssl-src)
- [CVE-2023-0217](https://cve.now/CVE-2023-0217.md): NULL dereference validating DSA public key (CVSS 7.5, OpenSSL · openssl-src)
- [CVE-2023-0286](https://cve.now/CVE-2023-0286.md): X.400 address type confusion in X.509 GeneralName (CVSS 7.4, OpenSSL · cryptography +1)
- [CVE-2023-0401](https://cve.now/CVE-2023-0401.md): NULL dereference during PKCS7 data verification (CVSS 7.5, OpenSSL · openssl-src)
- [CVE-2022-3996](https://cve.now/CVE-2022-3996.md): X.509 Policy Constraints Double Locking (CVSS 7.5, OpenSSL · openssl-src)
- [CVE-2022-3602](https://cve.now/CVE-2022-3602.md): X.509 Email Address 4-byte Buffer Overflow (CVSS 7.5, OpenSSL · openssl-src)
- [CVE-2022-3786](https://cve.now/CVE-2022-3786.md): X.509 Email Address Variable Length Buffer Overflow (CVSS 7.5, OpenSSL · openssl-src)
- [CVE-2022-3358](https://cve.now/CVE-2022-3358.md): Using a Custom Cipher with NID\_undef may lead to NULL encryption (no CVSS, OpenSSL · openssl-src)
- [CVE-2022-2097](https://cve.now/CVE-2022-2097.md): AES OCB fails to encrypt some bytes (no CVSS, OpenSSL · openssl-src)
- [CVE-2022-2274](https://cve.now/CVE-2022-2274.md): RSA implementation bug in AVX512IFMA instructions (no CVSS, OpenSSL · openssl-src)
- [CVE-2022-2068](https://cve.now/CVE-2022-2068.md): The c\_rehash script allows command injection (CVSS 9.8, OpenSSL)
- [CVE-2022-1473](https://cve.now/CVE-2022-1473.md): Resource leakage when decoding certificates and keys (CVSS 7.5, OpenSSL · openssl-src)
- [CVE-2022-1434](https://cve.now/CVE-2022-1434.md): Incorrect MAC key used in the RC4-MD5 ciphersuite (no CVSS, OpenSSL · openssl-src)
- [CVE-2022-1343](https://cve.now/CVE-2022-1343.md): OCSP\_basic\_verify may incorrectly verify the response signing certificate (CVSS 5.3, OpenSSL · openssl-src)
- [CVE-2022-1292](https://cve.now/CVE-2022-1292.md): The c\_rehash script allows command injection (CVSS 9.8, OpenSSL)
- [CVE-2022-0778](https://cve.now/CVE-2022-0778.md): Infinite loop in BN\_mod\_sqrt() reachable when parsing certificates (CVSS 7.5, OpenSSL · mariadb +5)
- [CVE-2021-4160](https://cve.now/CVE-2021-4160.md): BN\_mod\_exp may produce incorrect results on MIPS (no CVSS, OpenSSL)
- [CVE-2021-4044](https://cve.now/CVE-2021-4044.md): Invalid handling of X509\_verify\_cert() internal errors in libssl (no CVSS, OpenSSL · openssl-src)
- [CVE-2021-3712](https://cve.now/CVE-2021-3712.md): Read buffer overruns processing ASN.1 strings (CVSS 7.4, OpenSSL · openssl-src)
- [CVE-2021-3711](https://cve.now/CVE-2021-3711.md): SM2 Decryption Buffer Overflow (no CVSS, OpenSSL · openssl-src)
- [CVE-2021-3450](https://cve.now/CVE-2021-3450.md): CA certificate check bypass with X509\_V\_FLAG\_X509\_STRICT (no CVSS, OpenSSL · node +2)
- [CVE-2021-3449](https://cve.now/CVE-2021-3449.md): NULL pointer deref in signature\_algorithms processing (no CVSS, OpenSSL · node +2)
- [CVE-2021-23841](https://cve.now/CVE-2021-23841.md): Null pointer deref in X509\_issuer\_and\_serial\_hash() (no CVSS, OpenSSL · openssl-src)
- [CVE-2021-23840](https://cve.now/CVE-2021-23840.md): Integer overflow in CipherUpdate (CVSS 7.5, OpenSSL · openssl-src)
- [CVE-2021-23839](https://cve.now/CVE-2021-23839.md): Incorrect SSLv2 rollback protection (no CVSS, OpenSSL)
- [CVE-2020-1971](https://cve.now/CVE-2020-1971.md): EDIPARTYNAME NULL pointer dereference (CVSS 5.9, OpenSSL)
- [CVE-2020-1968](https://cve.now/CVE-2020-1968.md): Raccoon attack (CVSS 3.7, OpenSSL)
- [CVE-2020-1967](https://cve.now/CVE-2020-1967.md): Segmentation fault in SSL\_check\_chain (no CVSS, OpenSSL · openssl-src)
- [CVE-2019-1551](https://cve.now/CVE-2019-1551.md): rsaz\_512\_sqr overflow bug on x86\_64 (no CVSS, OpenSSL)
- [CVE-2011-4121](https://cve.now/CVE-2011-4121.md): The OpenSSL extension of Ruby (Git trunk) versions after 2011-09-01 up to 2011-11-03 always generated an exponent value of '1' to be used fo (no CVSS, OpenSSL extension of Ruby)
- [CVE-2019-1563](https://cve.now/CVE-2019-1563.md): Padding Oracle in PKCS7\_dataDecode and CMS\_decrypt\_set1\_pkey (no CVSS, OpenSSL)
- [CVE-2019-1549](https://cve.now/CVE-2019-1549.md): Fork Protection (no CVSS, OpenSSL)
- [CVE-2019-1547](https://cve.now/CVE-2019-1547.md): ECDSA remote timing attack (no CVSS, OpenSSL)
- [CVE-2019-1552](https://cve.now/CVE-2019-1552.md): Windows builds with insecure path defaults (no CVSS, OpenSSL)
- [CVE-2019-1543](https://cve.now/CVE-2019-1543.md): ChaCha20-Poly1305 with long nonces (no CVSS, OpenSSL)
- [CVE-2019-1559](https://cve.now/CVE-2019-1559.md): 0-byte record padding oracle (no CVSS, OpenSSL)
- [CVE-2018-0734](https://cve.now/CVE-2018-0734.md): Timing attack against DSA (no CVSS, OpenSSL)
- [CVE-2018-0735](https://cve.now/CVE-2018-0735.md): Timing attack against ECDSA signature generation (no CVSS, OpenSSL)
- [CVE-2016-7056](https://cve.now/CVE-2016-7056.md): A timing attack flaw was found in OpenSSL 1.0.1u and before that could allow a malicious user with local access to recover ECDSA P-256 priva (CVSS 5.5, The OpenSSL Project openssl)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/tech/openssl
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.