Exposure of OpenSSL

Web server extensions
553
exposure score
62,289
sites use
0
exploited
43
critical

CVEs

247 results
CVE-2025-69420HIGHMissing ASN1_TYPE validation in TS_RESP_verify_response() functionEPSS 0.9%CVE-2026-28388HIGHNULL Pointer Dereference When Processing a Delta CRLEPSS 0.9%CVE-2026-63072HIGHHeap Buffer Overflow in CMS Key UnwrappingEPSS 0.9%CVE-2026-28390HIGHPossible NULL Dereference When Processing CMS KeyTransportRecipientInfoEPSS 0.8%CVE-2026-28389HIGHPossible NULL Dereference When Processing CMS KeyAgreeRecipientInfoEPSS 0.8%CVE-2026-84782HIGHDTLS Retransmits Handshake Messages From a Stale Buffer OffsetEPSS 0.8%CVE-2025-15468MEDIUMNULL dereference in SSL_CIPHER_find() function on unknown cipher IDEPSS 0.8%CVE-2026-7383HIGHPossible Heap Buffer Overflow in ASN.1 Multibyte String ConversionEPSS 0.8%CVE-2026-42768LOWMulti-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt()EPSS 0.8%CVE-2026-74899CRITICALopenssl_encrypt before 1.4.0 Sandbox Escape via Type HierarchyEPSS 0.8%CVE-2026-74878CRITICALopenssl_encrypt before 1.4.0 TOTP Rate Limiter BypassEPSS 0.7%CVE-2026-27459HIGHpyOpenSSL DTLS cookie callback buffer overflowEPSS 0.7%CVE-2026-14456HIGHUnbounded Memory Growth in QUIC Server Incoming Channel QueueEPSS 0.7%CVE-2026-35191LOWQUIC Unvalidated Amplification Credit may be Over AccountedEPSS 0.7%CVE-2026-54873HIGHQUIC STREAM Fragment Metadata DoSEPSS 0.7%CVE-2026-9076HIGHOut-of-Bounds Read in CMS Password-Based DecryptionEPSS 0.7%CVE-2026-81690HIGHverify-usb before 1.4.9 Symlink Directory Traversal Code ExecutionEPSS 0.7%CVE-2026-45445HIGHAES-OCB IV Ignored on EVP_Cipher() PathEPSS 0.7%CVE-2026-28387HIGHPotential Use-after-free in DANE Client CodeEPSS 0.7%CVE-2019-1552—Windows builds with insecure path defaultsEPSS 0.7%