Latest vulnerabilities for vendor "openssl"

Where

Sort:

Software

openssl openssl

291

openssl

173

openssl openssl fips module

openssl crypt::openssl::x509

openssl

openssl dtls packet ordering (qsort comparator)

openssl expat

openssl fips object module

openssl libxml2

openssl openssl libcrypto

openssl parsecrl_extensions

oss-secOpenSSL "HollowByte" DoS via attacker-controlled memory allocation size in glibc

First published (updated )

https://seclists.org/oss-sec/2026/q3/171

OpenSSL OpenSSLOpenSSL X.509 Email Validation Out-Of-Bounds Read Information Disclosure Vulnerability

Risk 54

First published (updated )

Advisory

ZDI-26-426

OpenSSL OpenSSLZDI-26-426: OpenSSL X.509 Email Validation Out-Of-Bounds Read Information Disclosure Vulnerability

Risk 54

First published (updated )

ZDI-CAN-30378

OpenSSL Crypt::OpenSSL::X509Crypt::OpenSSL::X509 versions before 2.1.3 for Perl allow a heap out-of-bounds read via a long certificate extension OID in hv_exts

Risk 69

Severity

9.1

First published (updated )

CVE-2026-58102

OpenSSL Crypt::OpenSSL::X509Crypt::OpenSSL::X509 versions before 2.1.3 for Perl allow denial of service via NULL pointer dereference

Risk 45

Severity

7.5

First published (updated )

CVE-2026-58101

libssh libssh (OpenSSL backend AES-GCM)A flaw was found in libssh builds using the OpenSSL backend for AES-GCM. In the decrypt path in src/…

Risk 19

Severity

First published (updated )

REDHAT-BUG-2498180

oss-secpandemic of incomplete error handling in the OpenSSL ecosystem

First published (updated )

https://seclists.org/oss-sec/2026/q3/17

OpenSSL OpenSSLHMAC zero-length tag forgery in EVP_DigestVerifyFinal

Risk 43

Severity

2.1

First published (updated )

CVE-2026-6331

OpenSSL ParseCRL_ExtensionsCRL critical extension bypass in ParseCRL_Extensions

Risk 27

Severity

First published (updated )

CVE-2026-6450

OpenSSL OpenSSLOut-of-bounds heap read in SM2/SM3 certificate Subject Key Identifier computation

Risk 43

Severity

6.3

First published (updated )

CVE-2026-12340

OpenSSL OpenSSLUn-negotiated Raw Public Key (RFC 7250) accepted in place of X.509, bypassing chain validation

Risk 43

Severity

8.2

First published (updated )

CVE-2026-55960

OpenSSL OpenSSLPartial-chain verification accepts untrusted intermediate as trust anchor

Risk 38

Severity

First published (updated )

CVE-2026-6091

oss-secCommon PKCS#7 / CMS parsing issues in OpenSSL, WolfSSL, Bouncy Castle, & GnuPG

First published (updated )

https://seclists.org/oss-sec/2026/q2/1003

oss-secCommon PKCS#7 / CMS parsing issues in OpenSSL, WolfSSL, Bouncy Castle, & GnuPG

First published (updated )

https://seclists.org/oss-sec/2026/q2/1000

oss-secProposal: Add separate oss-security-vulnerability-ports mailing list (for AI vulnpocalypse)

First published (updated )

https://seclists.org/oss-sec/2026/q2/922

OpenSSL PKCS#7 CVE-2026-45447

First published (updated )

Social

OpenSSL OpenSSLPossible Out of Bounds Read in X509_VERIFY_PARAM_set1_email()

Risk 37

Severity

6.2

First published (updated )

CVE-2026-42771

OpenSSL OpenSSLNULL Dereference in Certificate Verification with OCSP Checking

Risk 45

Severity

7.5

First published (updated )

CVE-2026-42765

OpenSSL OpenSSLDouble-free When Checking OCSP Stapled Response

Risk 41

Severity

First published (updated )

CVE-2026-35188

oss-secOpenSSL Security Advisory

First published (updated )

https://seclists.org/oss-sec/2026/q2/861

TychonTychon is vulnerable to privilege escalation due to OPENSSLDIR location

Risk 56

Severity

7.4

First published (updated )

CVE-2022-4991

OpenSSL OpenSSLHeap Use-After-Free in the PKCS7_verify() Function

Risk 84

Severity

8.8

First published (updated )

CVE-2026-45447

OpenSSL OpenSSLUse After Free

Risk 33

Severity

First published (updated )

REDHAT-BUG-2481898

OpenSSL OpenSSLIncorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes

Risk 34

Severity

4.8

First published (updated )

CVE-2026-45446

OpenSSL OpenSSLIncorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes Incorrect Tag Processi…

Risk 5

Severity

First published (updated )

REDHAT-BUG-2481897

OpenSSL OpenSSLFFC-DH Peer Validation Uses Attacker-Supplied q

Risk 21

Severity

3.7

First published (updated )

CVE-2026-42770

OpenSSL OpenSSLAES-OCB IV Ignored on EVP_Cipher() Path

Risk 46

Severity

7.5

First published (updated )

CVE-2026-45445

OpenSSL OpenSSLFFC-DH Peer Validation Uses Attacker-Supplied q (CVE-2026-42770) Severity: Low Issue summary: When …

Risk 5

Severity

First published (updated )

REDHAT-BUG-2481894

OpenSSL OpenSSLAES-OCB IV Ignored on EVP_Cipher() Path AES-OCB IV Ignored on EVP_Cipher() Path (CVE-2026-45445) Se…

Risk 19

Severity

First published (updated )

REDHAT-BUG-2481896

OpenSSL OpenSSLTrust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate

Risk 34

Severity

5.3

First published (updated )

CVE-2026-42769

Trending

Vendor Risk Score

Software

oss-secOpenSSL "HollowByte" DoS via attacker-controlled memory allocation size in glibc

OpenSSL OpenSSLOpenSSL X.509 Email Validation Out-Of-Bounds Read Information Disclosure Vulnerability

OpenSSL OpenSSLZDI-26-426: OpenSSL X.509 Email Validation Out-Of-Bounds Read Information Disclosure Vulnerability

OpenSSL Crypt::OpenSSL::X509Crypt::OpenSSL::X509 versions before 2.1.3 for Perl allow a heap out-of-bounds read via a long certificate extension OID in hv_exts

OpenSSL Crypt::OpenSSL::X509Crypt::OpenSSL::X509 versions before 2.1.3 for Perl allow denial of service via NULL pointer dereference

Don't miss critical vulnerabilities

libssh libssh (OpenSSL backend AES-GCM)A flaw was found in libssh builds using the OpenSSL backend for AES-GCM. In the decrypt path in src/…

oss-secpandemic of incomplete error handling in the OpenSSL ecosystem

OpenSSL OpenSSLHMAC zero-length tag forgery in EVP_DigestVerifyFinal

OpenSSL ParseCRL_ExtensionsCRL critical extension bypass in ParseCRL_Extensions

OpenSSL OpenSSLOut-of-bounds heap read in SM2/SM3 certificate Subject Key Identifier computation

Don't miss critical vulnerabilities

OpenSSL OpenSSLUn-negotiated Raw Public Key (RFC 7250) accepted in place of X.509, bypassing chain validation

OpenSSL OpenSSLPartial-chain verification accepts untrusted intermediate as trust anchor

oss-secCommon PKCS#7 / CMS parsing issues in OpenSSL, WolfSSL, Bouncy Castle, & GnuPG

oss-secCommon PKCS#7 / CMS parsing issues in OpenSSL, WolfSSL, Bouncy Castle, & GnuPG

oss-secProposal: Add separate oss-security-vulnerability-ports mailing list (for AI vulnpocalypse)

Don't miss critical vulnerabilities

OpenSSL PKCS#7 CVE-2026-45447

OpenSSL OpenSSLPossible Out of Bounds Read in X509_VERIFY_PARAM_set1_email()

OpenSSL OpenSSLNULL Dereference in Certificate Verification with OCSP Checking

OpenSSL OpenSSLDouble-free When Checking OCSP Stapled Response

oss-secOpenSSL Security Advisory

Don't miss critical vulnerabilities

TychonTychon is vulnerable to privilege escalation due to OPENSSLDIR location

OpenSSL OpenSSLHeap Use-After-Free in the PKCS7_verify() Function

OpenSSL OpenSSLUse After Free

OpenSSL OpenSSLIncorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes

OpenSSL OpenSSLIncorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes Incorrect Tag Processi…

Don't miss critical vulnerabilities

OpenSSL OpenSSLFFC-DH Peer Validation Uses Attacker-Supplied q

OpenSSL OpenSSLAES-OCB IV Ignored on EVP_Cipher() Path

OpenSSL OpenSSLFFC-DH Peer Validation Uses Attacker-Supplied q (CVE-2026-42770) Severity: Low Issue summary: When …

OpenSSL OpenSSLAES-OCB IV Ignored on EVP_Cipher() Path AES-OCB IV Ignored on EVP_Cipher() Path (CVE-2026-45445) Se…

OpenSSL OpenSSLTrust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate

Don't miss critical vulnerabilities

Company

Resources

Contact