Vulnerabilities in OpenSSL
142 resultsCVE-2026-42770LOWFFC-DH Peer Validation Uses Attacker-Supplied qEPSS 0.5%CVE-2026-42772MEDIUMPotential CPU DoS via O(n^2) Fragment Reassembly in QUICEPSS 0.5%CVE-2026-54875LOWNon-Constant-Time SM2 Scalar Multiplication on ARM64 and RISC-VEPSS 0.5%CVE-2025-66199MEDIUMTLS 1.3 CompressedCertificate excessive memory allocationEPSS 0.5%CVE-2026-2673MEDIUMOpenSSL TLS 1.3 server may choose unexpected key agreement groupEPSS 0.5%CVE-2026-54872LOWTiming Side-Channel in Scalar Multiplication for Non-NIST EC CurvesEPSS 0.4%CVE-2026-45446MEDIUMIncorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modesEPSS 0.4%CVE-2026-77696LOWTiming Side-Channel in SM2 Signature GenerationEPSS 0.4%CVE-2026-72897HIGHOut-of-Bounds Access After SSL_set_SSL_CTX() During a HandshakeEPSS 0.4%CVE-2025-4575MEDIUMThe x509 application adds trusted use instead of rejected useEPSS 0.4%CVE-2026-34181HIGHPKCS#12 Files with PBMAC1 Are Accepted with Short HMAC KeysEPSS 0.4%CVE-2026-75805MEDIUMNULL Pointer Dereference in CMP Client Revocation Response HandlingEPSS 0.3%CVE-2026-35189MEDIUMExcessive Memory Allocation in Relative CRLDP ProcessingEPSS 0.3%CVE-2026-35188MEDIUMDouble-free When Checking OCSP Stapled ResponseEPSS 0.3%CVE-2026-84783HIGHUse-After-Free in X.509 Extension Cache Under Concurrent UseEPSS 0.3%CVE-2026-75803CRITICALAEAD Forgeries with Empty Ciphertext When Using EVP_Cipher()EPSS 0.3%CVE-2026-31789MEDIUMHeap Buffer Overflow in Hexadecimal ConversionEPSS 0.3%CVE-2026-42771MEDIUMPossible Out of Bounds Read in X509_VERIFY_PARAM_set1_email()EPSS 0.2%CVE-2025-15469MEDIUM'openssl dgst' one-shot codepath silently truncates inputs >16MBEPSS 0.2%CVE-2025-68160MEDIUMHeap out-of-bounds write in BIO_f_linebuffer on short writesEPSS 0.2%