# cve.now: OpenSSL

The newest entries naming OpenSSL as an affected vendor (up to 200), of 147 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-95692](https://cve.now/CVE-2026-95692.md): Out-of-Bounds Read and Incorrect IV Length Handling in AES-GCM-SIV (low (no CVSS))
- [CVE-2026-95691](https://cve.now/CVE-2026-95691.md): Retransmitted QUIC CRYPTO Frames Can Cause DoS or One-byte Disclosure (low (no CVSS))
- [CVE-2026-88823](https://cve.now/CVE-2026-88823.md): AES-GCM-SIV AAD Forgery After Zero-length Incremental AAD Update (low (no CVSS))
- [CVE-2026-88822](https://cve.now/CVE-2026-88822.md): QUIC Uses Uninitialized Stack Bytes During Automated Peer Detection (low (no CVSS))
- [CVE-2026-107496](https://cve.now/CVE-2026-107496.md): Infinite Loop in CMS\_encrypt() With an EC Group Order of 1 (low (no CVSS))
- [CVE-2026-84784](https://cve.now/CVE-2026-84784.md): QUIC: Unbounded RETIRE\_CONNECTION\_ID Backlog (CVSS 7.5)
- [CVE-2026-84783](https://cve.now/CVE-2026-84783.md): Use-After-Free in X.509 Extension Cache Under Concurrent Use (CVSS 7.5)
- [CVE-2026-84782](https://cve.now/CVE-2026-84782.md): DTLS Retransmits Handshake Messages From a Stale Buffer Offset (CVSS 8.2)
- [CVE-2026-77696](https://cve.now/CVE-2026-77696.md): Timing Side-Channel in SM2 Signature Generation (CVSS 3.7)
- [CVE-2026-75806](https://cve.now/CVE-2026-75806.md): Unauthenticated and Undersized DTLS 1.2 AEAD Record Causes DoS (CVSS 5.3)
- [CVE-2026-75805](https://cve.now/CVE-2026-75805.md): NULL Pointer Dereference in CMP Client Revocation Response Handling (CVSS 5.3)
- [CVE-2026-75804](https://cve.now/CVE-2026-75804.md): QUIC Connection-Level Flow Control is Not Enforced for Streams (CVSS 5.3)
- [CVE-2026-72897](https://cve.now/CVE-2026-72897.md): Out-of-Bounds Access After SSL\_set\_SSL\_CTX() During a Handshake (CVSS 7.5)
- [CVE-2026-54875](https://cve.now/CVE-2026-54875.md): Non-Constant-Time SM2 Scalar Multiplication on ARM64 and RISC-V (CVSS 3.7)
- [CVE-2026-54873](https://cve.now/CVE-2026-54873.md): QUIC STREAM Fragment Metadata DoS (CVSS 7.5)
- [CVE-2026-54872](https://cve.now/CVE-2026-54872.md): Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves (CVSS 3.7)
- [CVE-2026-42772](https://cve.now/CVE-2026-42772.md): Potential CPU DoS via O(n^2) Fragment Reassembly in QUIC (CVSS 5.3)
- [CVE-2026-35191](https://cve.now/CVE-2026-35191.md): QUIC Unvalidated Amplification Credit may be Over Accounted (CVSS 3.7)
- [CVE-2026-35189](https://cve.now/CVE-2026-35189.md): Excessive Memory Allocation in Relative CRLDP Processing (CVSS 5.3)
- [CVE-2026-75803](https://cve.now/CVE-2026-75803.md): AEAD Forgeries with Empty Ciphertext When Using EVP\_Cipher() (CVSS 9.1)
- [CVE-2026-63076](https://cve.now/CVE-2026-63076.md): Invalid Pointer Dereference in CMP Server via Crafted protectionAlg (CVSS 7.5)
- [CVE-2026-63075](https://cve.now/CVE-2026-63075.md): QUIC ACK-only Packet Retention Can Cause Memory Exhaustion (CVSS 7.5)
- [CVE-2026-63074](https://cve.now/CVE-2026-63074.md): CMP Indefinite Cache Growth of ExtraCerts (CVSS 5.9)
- [CVE-2026-63073](https://cve.now/CVE-2026-63073.md): Untrusted Sender DN Used as Format String in CMP Response Validation (CVSS 9.8)
- [CVE-2026-63072](https://cve.now/CVE-2026-63072.md): Heap Buffer Overflow in CMS Key Unwrapping (CVSS 7.5)
- [CVE-2026-54874](https://cve.now/CVE-2026-54874.md): Excessive Memory Use Buffering DTLS Records for a Future Epoch (CVSS 7.5)
- [CVE-2026-18798](https://cve.now/CVE-2026-18798.md): QUIC Server May Trigger Double Free When Processing INITIAL Packet (CVSS 7.5)
- [CVE-2026-14457](https://cve.now/CVE-2026-14457.md): RPK Server Signature Algorithm Selection Can Dereference a Missing Certificate (CVSS 7.5)
- [CVE-2026-14456](https://cve.now/CVE-2026-14456.md): Unbounded Memory Growth in QUIC Server Incoming Channel Queue (CVSS 7.5)
- [CVE-2026-54876](https://cve.now/CVE-2026-54876.md): Client-Side Memory Leak in OCSP Response Checking (CVSS 7.5)
- [CVE-2026-45447](https://cve.now/CVE-2026-45447.md): Heap Use-After-Free in the PKCS7\_verify() Function (CVSS 8.8)
- [CVE-2026-45446](https://cve.now/CVE-2026-45446.md): Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes (CVSS 4.8)
- [CVE-2026-45445](https://cve.now/CVE-2026-45445.md): AES-OCB IV Ignored on EVP\_Cipher() Path (CVSS 7.5)
- [CVE-2026-42771](https://cve.now/CVE-2026-42771.md): Possible Out of Bounds Read in X509\_VERIFY\_PARAM\_set1\_email() (CVSS 6.2)
- [CVE-2026-42770](https://cve.now/CVE-2026-42770.md): FFC-DH Peer Validation Uses Attacker-Supplied q (CVSS 3.7)
- [CVE-2026-42769](https://cve.now/CVE-2026-42769.md): Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate (CVSS 5.3)
- [CVE-2026-42768](https://cve.now/CVE-2026-42768.md): Multi-RecipientInfo Bleichenbacher Oracle in CMS\_decrypt() and PKCS7\_decrypt() (CVSS 3.7)
- [CVE-2026-42767](https://cve.now/CVE-2026-42767.md): NULL Pointer Dereference in CRMF EncryptedValue Decryption (CVSS 5.9)
- [CVE-2026-42766](https://cve.now/CVE-2026-42766.md): Possible NULL Dereference in Password-Based CMS Decryption (CVSS 5.9)
- [CVE-2026-42765](https://cve.now/CVE-2026-42765.md): NULL Dereference in Certificate Verification with OCSP Checking (CVSS 7.5)
- [CVE-2026-42764](https://cve.now/CVE-2026-42764.md): NULL Pointer Dereference in QUIC Server Initial Packet Handling (CVSS 7.5)
- [CVE-2026-35188](https://cve.now/CVE-2026-35188.md): Double-free When Checking OCSP Stapled Response (CVSS 5.0)
- [CVE-2026-34183](https://cve.now/CVE-2026-34183.md): Unbounded Memory Growth in the QUIC PATH\_CHALLENGE Handler (CVSS 7.5)
- [CVE-2026-34182](https://cve.now/CVE-2026-34182.md): CMS AuthEnvelopedData Processing May Accept Forged Messages (CVSS 9.1)
- [CVE-2026-34181](https://cve.now/CVE-2026-34181.md): PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys (CVSS 7.4)
- [CVE-2026-34180](https://cve.now/CVE-2026-34180.md): Heap Buffer Over-read in ASN.1 Content Parsing (CVSS 7.5)
- [CVE-2026-9076](https://cve.now/CVE-2026-9076.md): Out-of-Bounds Read in CMS Password-Based Decryption (CVSS 7.5)
- [CVE-2026-7383](https://cve.now/CVE-2026-7383.md): Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion (CVSS 8.1)
- [CVE-2026-31790](https://cve.now/CVE-2026-31790.md): Incorrect Failure Handling in RSA KEM RSASVE Encapsulation (CVSS 7.5)
- [CVE-2026-31789](https://cve.now/CVE-2026-31789.md): Heap Buffer Overflow in Hexadecimal Conversion (CVSS 5.8)
- [CVE-2026-28390](https://cve.now/CVE-2026-28390.md): Possible NULL Dereference When Processing CMS KeyTransportRecipientInfo (CVSS 7.5)
- [CVE-2026-28389](https://cve.now/CVE-2026-28389.md): Possible NULL Dereference When Processing CMS KeyAgreeRecipientInfo (CVSS 7.5)
- [CVE-2026-28388](https://cve.now/CVE-2026-28388.md): NULL Pointer Dereference When Processing a Delta CRL (CVSS 7.5)
- [CVE-2026-28387](https://cve.now/CVE-2026-28387.md): Potential Use-after-free in DANE Client Code (CVSS 8.1)
- [CVE-2026-28386](https://cve.now/CVE-2026-28386.md): Out-of-bounds Read in AES-CFB-128 on X86-64 with AVX-512 Support (CVSS 9.1)
- [CVE-2026-2673](https://cve.now/CVE-2026-2673.md): OpenSSL TLS 1.3 server may choose unexpected key agreement group (CVSS 6.5)
- [CVE-2026-22796](https://cve.now/CVE-2026-22796.md): ASN1\_TYPE Type Confusion in the PKCS7\_digest\_from\_attributes() function (CVSS 5.3)
- [CVE-2026-22795](https://cve.now/CVE-2026-22795.md): Missing ASN1\_TYPE validation in PKCS#12 parsing (CVSS 5.5)
- [CVE-2025-69421](https://cve.now/CVE-2025-69421.md): NULL Pointer Dereference in PKCS12\_item\_decrypt\_d2i\_ex function (CVSS 7.5)
- [CVE-2025-69420](https://cve.now/CVE-2025-69420.md): Missing ASN1\_TYPE validation in TS\_RESP\_verify\_response() function (CVSS 7.5)
- [CVE-2025-69419](https://cve.now/CVE-2025-69419.md): Out of bounds write in PKCS12\_get\_friendlyname() UTF-8 conversion (CVSS 7.4)
- [CVE-2025-69418](https://cve.now/CVE-2025-69418.md): Unauthenticated/unencrypted trailing bytes with low-level OCB function calls (CVSS 4.0)
- [CVE-2025-68160](https://cve.now/CVE-2025-68160.md): Heap out-of-bounds write in BIO\_f\_linebuffer on short writes (CVSS 4.7)
- [CVE-2025-66199](https://cve.now/CVE-2025-66199.md): TLS 1.3 CompressedCertificate excessive memory allocation (CVSS 5.9)
- [CVE-2025-15469](https://cve.now/CVE-2025-15469.md): 'openssl dgst' one-shot codepath silently truncates inputs \>16MB (CVSS 5.5)
- [CVE-2025-15468](https://cve.now/CVE-2025-15468.md): NULL dereference in SSL\_CIPHER\_find() function on unknown cipher ID (CVSS 5.9)
- [CVE-2025-15467](https://cve.now/CVE-2025-15467.md): Stack buffer overflow in CMS (Auth)EnvelopedData parsing (CVSS 8.8)
- [CVE-2025-11187](https://cve.now/CVE-2025-11187.md): Improper validation of PBMAC1 parameters in PKCS#12 MAC verification (CVSS 6.1)
- [CVE-2025-9232](https://cve.now/CVE-2025-9232.md): Out-of-bounds read in HTTP client no\_proxy handling (CVSS 5.9)
- [CVE-2025-9231](https://cve.now/CVE-2025-9231.md): Timing side-channel in SM2 algorithm on 64 bit ARM (CVSS 5.9)
- [CVE-2025-9230](https://cve.now/CVE-2025-9230.md): Out-of-bounds read & write in RFC 3211 KEK Unwrap (CVSS 9.8)
- [CVE-2025-4575](https://cve.now/CVE-2025-4575.md): The x509 application adds trusted use instead of rejected use (CVSS 6.5)
- [CVE-2024-12797](https://cve.now/CVE-2024-12797.md): RFC7250 handshakes with unauthenticated servers don't abort as expected (CVSS 7.4)
- [CVE-2024-13176](https://cve.now/CVE-2024-13176.md): Timing side-channel in ECDSA signature computation (CVSS 4.6)
- [CVE-2024-4741](https://cve.now/CVE-2024-4741.md): Use After Free with SSL\_free\_buffers (CVSS 9.8)
- [CVE-2024-9143](https://cve.now/CVE-2024-9143.md): Low-level invalid GF(2^m) parameters lead to OOB memory access (CVSS 8.8)
- [CVE-2024-6119](https://cve.now/CVE-2024-6119.md): Possible denial of service in X.509 name checks (CVSS 7.5)
- [CVE-2024-5535](https://cve.now/CVE-2024-5535.md): SSL\_select\_next\_proto buffer overread (CVSS 9.1)
- [CVE-2024-4603](https://cve.now/CVE-2024-4603.md): Excessive time spent checking DSA keys and parameters (CVSS 5.3)
- [CVE-2023-6237](https://cve.now/CVE-2023-6237.md): Excessive time spent checking invalid RSA public keys (CVSS 5.9)
- [CVE-2024-2511](https://cve.now/CVE-2024-2511.md): Unbounded memory growth with session handling in TLSv1.3 (CVSS 5.9)
- [CVE-2024-0727](https://cve.now/CVE-2024-0727.md): PKCS12 Decoding crashes (CVSS 5.5)
- [CVE-2023-6129](https://cve.now/CVE-2023-6129.md): POLY1305 MAC implementation corrupts vector registers on PowerPC (CVSS 6.5)
- [CVE-2023-5678](https://cve.now/CVE-2023-5678.md): Excessive time spent in DH check / generation with large Q parameter value (CVSS 5.3)
- [CVE-2023-5363](https://cve.now/CVE-2023-5363.md): Incorrect cipher key & IV length processing (CVSS 7.5)
- [CVE-2023-4807](https://cve.now/CVE-2023-4807.md): POLY1305 MAC implementation corrupts XMM registers on Windows (CVSS 7.8)
- [CVE-2023-3817](https://cve.now/CVE-2023-3817.md): Excessive time spent checking DH q parameter value (CVSS 5.3)
- [CVE-2023-3446](https://cve.now/CVE-2023-3446.md): Excessive time spent checking DH keys and parameters (CVSS 5.3)
- [CVE-2023-2975](https://cve.now/CVE-2023-2975.md): AES-SIV implementation ignores empty associated data entries (CVSS 5.3)
- [CVE-2023-2650](https://cve.now/CVE-2023-2650.md): Possible DoS translating ASN.1 object identifiers (CVSS 6.5)
- [CVE-2023-1255](https://cve.now/CVE-2023-1255.md): Input buffer over-read in AES-XTS implementation on 64 bit ARM (CVSS 5.9)
- [CVE-2023-0466](https://cve.now/CVE-2023-0466.md): Certificate policy check not enabled (CVSS 5.3)
- [CVE-2023-0465](https://cve.now/CVE-2023-0465.md): Invalid certificate policies in leaf certificates are silently ignored (CVSS 5.3)
- [CVE-2023-0464](https://cve.now/CVE-2023-0464.md): Excessive Resource Usage Verifying X.509 Policy Constraints (CVSS 7.5)
- [CVE-2022-4203](https://cve.now/CVE-2022-4203.md): X.509 Name Constraints Read Buffer Overflow (CVSS 4.9)
- [CVE-2022-4304](https://cve.now/CVE-2022-4304.md): Timing Oracle in RSA Decryption (CVSS 5.9)
- [CVE-2022-4450](https://cve.now/CVE-2022-4450.md): Double free after calling PEM\_read\_bio\_ex (CVSS 7.5)
- [CVE-2023-0215](https://cve.now/CVE-2023-0215.md): Use-after-free following BIO\_new\_NDEF (CVSS 7.5)
- [CVE-2023-0216](https://cve.now/CVE-2023-0216.md): Invalid pointer dereference in d2i\_PKCS7 functions (CVSS 7.5)
- [CVE-2023-0217](https://cve.now/CVE-2023-0217.md): NULL dereference validating DSA public key (CVSS 7.5)
- [CVE-2023-0286](https://cve.now/CVE-2023-0286.md): X.400 address type confusion in X.509 GeneralName (CVSS 7.4)
- [CVE-2023-0401](https://cve.now/CVE-2023-0401.md): NULL dereference during PKCS7 data verification (CVSS 7.5)
- [CVE-2022-3996](https://cve.now/CVE-2022-3996.md): X.509 Policy Constraints Double Locking (CVSS 7.5)
- [CVE-2022-3786](https://cve.now/CVE-2022-3786.md): X.509 Email Address Variable Length Buffer Overflow (CVSS 7.5)
- [CVE-2022-3602](https://cve.now/CVE-2022-3602.md): X.509 Email Address 4-byte Buffer Overflow (CVSS 7.5)
- [CVE-2022-3358](https://cve.now/CVE-2022-3358.md): Using a Custom Cipher with NID\_undef may lead to NULL encryption (no CVSS)
- [CVE-2022-2097](https://cve.now/CVE-2022-2097.md): AES OCB fails to encrypt some bytes (no CVSS)
- [CVE-2022-2274](https://cve.now/CVE-2022-2274.md): RSA implementation bug in AVX512IFMA instructions (no CVSS)
- [CVE-2022-2068](https://cve.now/CVE-2022-2068.md): The c\_rehash script allows command injection (CVSS 9.8)
- [CVE-2022-1473](https://cve.now/CVE-2022-1473.md): Resource leakage when decoding certificates and keys (CVSS 7.5)
- [CVE-2022-1434](https://cve.now/CVE-2022-1434.md): Incorrect MAC key used in the RC4-MD5 ciphersuite (no CVSS)
- [CVE-2022-1343](https://cve.now/CVE-2022-1343.md): OCSP\_basic\_verify may incorrectly verify the response signing certificate (CVSS 5.3)
- [CVE-2022-1292](https://cve.now/CVE-2022-1292.md): The c\_rehash script allows command injection (CVSS 9.8)
- [CVE-2022-0778](https://cve.now/CVE-2022-0778.md): Infinite loop in BN\_mod\_sqrt() reachable when parsing certificates (CVSS 7.5)
- [CVE-2021-4160](https://cve.now/CVE-2021-4160.md): BN\_mod\_exp may produce incorrect results on MIPS (no CVSS)
- [CVE-2021-4044](https://cve.now/CVE-2021-4044.md): Invalid handling of X509\_verify\_cert() internal errors in libssl (no CVSS)
- [CVE-2021-3712](https://cve.now/CVE-2021-3712.md): Read buffer overruns processing ASN.1 strings (CVSS 7.4)
- [CVE-2021-3711](https://cve.now/CVE-2021-3711.md): SM2 Decryption Buffer Overflow (no CVSS)
- [CVE-2021-3450](https://cve.now/CVE-2021-3450.md): CA certificate check bypass with X509\_V\_FLAG\_X509\_STRICT (no CVSS)
- [CVE-2021-3449](https://cve.now/CVE-2021-3449.md): NULL pointer deref in signature\_algorithms processing (no CVSS)
- [CVE-2021-23841](https://cve.now/CVE-2021-23841.md): Null pointer deref in X509\_issuer\_and\_serial\_hash() (no CVSS)
- [CVE-2021-23840](https://cve.now/CVE-2021-23840.md): Integer overflow in CipherUpdate (CVSS 7.5)
- [CVE-2021-23839](https://cve.now/CVE-2021-23839.md): Incorrect SSLv2 rollback protection (no CVSS)
- [CVE-2020-1971](https://cve.now/CVE-2020-1971.md): EDIPARTYNAME NULL pointer dereference (CVSS 5.9)
- [CVE-2020-1968](https://cve.now/CVE-2020-1968.md): Raccoon attack (CVSS 3.7)
- [CVE-2020-1967](https://cve.now/CVE-2020-1967.md): Segmentation fault in SSL\_check\_chain (no CVSS)
- [CVE-2019-1551](https://cve.now/CVE-2019-1551.md): rsaz\_512\_sqr overflow bug on x86\_64 (no CVSS)
- [CVE-2011-4121](https://cve.now/CVE-2011-4121.md): The OpenSSL extension of Ruby (Git trunk) versions after 2011-09-01 up to 2011-11-03 always generated an exponent value of '1' to be used fo (no CVSS)
- [CVE-2019-1563](https://cve.now/CVE-2019-1563.md): Padding Oracle in PKCS7\_dataDecode and CMS\_decrypt\_set1\_pkey (no CVSS)
- [CVE-2019-1549](https://cve.now/CVE-2019-1549.md): Fork Protection (no CVSS)
- [CVE-2019-1547](https://cve.now/CVE-2019-1547.md): ECDSA remote timing attack (no CVSS)
- [CVE-2019-1552](https://cve.now/CVE-2019-1552.md): Windows builds with insecure path defaults (no CVSS)
- [CVE-2019-1543](https://cve.now/CVE-2019-1543.md): ChaCha20-Poly1305 with long nonces (no CVSS)
- [CVE-2019-1559](https://cve.now/CVE-2019-1559.md): 0-byte record padding oracle (no CVSS)
- [CVE-2018-0734](https://cve.now/CVE-2018-0734.md): Timing attack against DSA (no CVSS)
- [CVE-2018-0735](https://cve.now/CVE-2018-0735.md): Timing attack against ECDSA signature generation (no CVSS)
- [CVE-2018-0732](https://cve.now/CVE-2018-0732.md): Client DoS due to large DH parameter (no CVSS)
- [CVE-2018-0737](https://cve.now/CVE-2018-0737.md): Cache timing vulnerability in RSA Key Generation (no CVSS)
- [CVE-2018-0739](https://cve.now/CVE-2018-0739.md): Constructed ASN.1 types with a recursive definition could exceed the stack (no CVSS)
- [CVE-2018-0733](https://cve.now/CVE-2018-0733.md): Incorrect CRYPTO\_memcmp on HP-UX PA-RISC (no CVSS)
- [CVE-2016-8610](https://cve.now/CVE-2016-8610.md): A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL protocol defined processi (no CVSS)
- [CVE-2017-3733](https://cve.now/CVE-2017-3733.md): Encrypt-Then-Mac renegotiation crash (no CVSS)
- [CVE-2017-3732](https://cve.now/CVE-2017-3732.md): BN\_mod\_exp may produce incorrect results on x86\_64 (no CVSS)
- [CVE-2017-3731](https://cve.now/CVE-2017-3731.md): Truncated packet could crash via OOB read (no CVSS)
- [CVE-2017-3730](https://cve.now/CVE-2017-3730.md): Bad (EC)DHE parameters cause a client crash (no CVSS)
- [CVE-2016-7054](https://cve.now/CVE-2016-7054.md): ChaCha20/Poly1305 heap-buffer-overflow (no CVSS)
- [CVE-2016-7053](https://cve.now/CVE-2016-7053.md): CMS Null dereference (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/openssl
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.