OpenSSL vulnerabilities
147 CVEs and advisories name OpenSSL as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-45447Heap Use-After-Free in the PKCS7_verify() Function
- CVE-2026-45446Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes
- CVE-2026-45445AES-OCB IV Ignored on EVP_Cipher() Path
- CVE-2026-42771Possible Out of Bounds Read in X509_VERIFY_PARAM_set1_email()
- CVE-2026-42770FFC-DH Peer Validation Uses Attacker-Supplied q
- CVE-2026-42769Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate
- CVE-2026-42768Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt()
- CVE-2026-42767NULL Pointer Dereference in CRMF EncryptedValue Decryption
- CVE-2026-42766Possible NULL Dereference in Password-Based CMS Decryption
- CVE-2026-42765NULL Dereference in Certificate Verification with OCSP Checking
- CVE-2026-42764NULL Pointer Dereference in QUIC Server Initial Packet Handling
- CVE-2026-35188Double-free When Checking OCSP Stapled Response
- CVE-2026-34183Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler
- CVE-2026-34182CMS AuthEnvelopedData Processing May Accept Forged Messages
- CVE-2026-34181PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys
- CVE-2026-34180Heap Buffer Over-read in ASN.1 Content Parsing
- CVE-2026-9076Out-of-Bounds Read in CMS Password-Based Decryption
- CVE-2026-7383Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion
- CVE-2026-31790Incorrect Failure Handling in RSA KEM RSASVE Encapsulation
- CVE-2026-31789Heap Buffer Overflow in Hexadecimal Conversion
- CVE-2026-28390Possible NULL Dereference When Processing CMS KeyTransportRecipientInfo
- CVE-2026-28389Possible NULL Dereference When Processing CMS KeyAgreeRecipientInfo
- CVE-2026-28388NULL Pointer Dereference When Processing a Delta CRL
- CVE-2026-28387Potential Use-after-free in DANE Client Code
- CVE-2026-28386Out-of-bounds Read in AES-CFB-128 on X86-64 with AVX-512 Support
- CVE-2026-2673OpenSSL TLS 1.3 server may choose unexpected key agreement group
- CVE-2026-22796ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function
- CVE-2026-22795Missing ASN1_TYPE validation in PKCS#12 parsing
- CVE-2025-69421NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function
- CVE-2025-69420Missing ASN1_TYPE validation in TS_RESP_verify_response() function