Vulnerabilities in OpenSSL
142 resultsCVE-2024-4603MEDIUMExcessive time spent checking DSA keys and parametersEPSS 1.1%CVE-2019-1547—ECDSA remote timing attackEPSS 1.1%CVE-2026-75806MEDIUMUnauthenticated and Undersized DTLS 1.2 AEAD Record Causes DoSEPSS 1.1%CVE-2026-42766MEDIUMPossible NULL Dereference in Password-Based CMS DecryptionEPSS 1.1%CVE-2026-34182CRITICALCMS AuthEnvelopedData Processing May Accept Forged MessagesEPSS 1.1%CVE-2026-31790HIGHIncorrect Failure Handling in RSA KEM RSASVE EncapsulationEPSS 1.0%CVE-2026-34183HIGHUnbounded Memory Growth in the QUIC PATH_CHALLENGE HandlerEPSS 1.0%CVE-2026-34180HIGHHeap Buffer Over-read in ASN.1 Content ParsingEPSS 1.0%CVE-2023-1255MEDIUMInput buffer over-read in AES-XTS implementation on 64 bit ARMEPSS 1.0%CVE-2025-69421HIGHNULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex functionEPSS 0.9%CVE-2025-69420HIGHMissing ASN1_TYPE validation in TS_RESP_verify_response() functionEPSS 0.9%CVE-2026-28388HIGHNULL Pointer Dereference When Processing a Delta CRLEPSS 0.9%CVE-2026-63072HIGHHeap Buffer Overflow in CMS Key UnwrappingEPSS 0.9%CVE-2026-28389HIGHPossible NULL Dereference When Processing CMS KeyAgreeRecipientInfoEPSS 0.8%CVE-2026-28390HIGHPossible NULL Dereference When Processing CMS KeyTransportRecipientInfoEPSS 0.8%CVE-2026-84782HIGHDTLS Retransmits Handshake Messages From a Stale Buffer OffsetEPSS 0.8%CVE-2025-15468MEDIUMNULL dereference in SSL_CIPHER_find() function on unknown cipher IDEPSS 0.8%CVE-2026-7383HIGHPossible Heap Buffer Overflow in ASN.1 Multibyte String ConversionEPSS 0.8%CVE-2026-42768LOWMulti-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt()EPSS 0.8%CVE-2026-14456HIGHUnbounded Memory Growth in QUIC Server Incoming Channel QueueEPSS 0.7%