44 entries matching openssl — updated 2026-11-02 · vulnfeed
| CVE / ID | Title | Severity | CVSS | EPSS | Source | Date |
|---|---|---|---|---|---|---|
| CVE-2026-105031 | When using the OpenSSL TLS implementation, both the pn_ssl_domain_set_trusted_ca_db() & pn_tls_config_set_trusted_certs( | UNKNOWN | — | 3%ile | NVD | 2026-10-29 |
| CVE-2026-34182 | CMS AuthEnvelopedData Processing May Accept Forged Messages | CRITICAL | 9.1 | 64%ile | Microsoft | 2026-09-08 |
| CVE-2026-84782 | DTLS Retransmits Handshake Messages From a Stale Buffer Offset | HIGH | 8.2 | 58%ile | Microsoft | 2026-09-08 |
| CVE-2026-54873 | QUIC STREAM Fragment Metadata DoS | HIGH | 7.5 | 54%ile | Microsoft | 2026-09-08 |
| CVE-2026-72897 | Out-of-Bounds Access After SSL_set_SSL_CTX() During a Handshake | HIGH | 7.5 | 33%ile | Microsoft | 2026-09-08 |
| CVE-2026-80229 | OpenSSL provider use-after-free | HIGH | 7.5 | 47%ile | Microsoft | 2026-09-08 |
| CVE-2026-84784 | QUIC: Unbounded RETIRE_CONNECTION_ID Backlog | HIGH | 7.5 | 49%ile | Microsoft | 2026-09-08 |
| CVE-2026-91767 | Heap-buffer-overflow in php_openssl_matches_wildcard_name on crafted server cert wildcard CN | MEDIUM | 6.5 | 1%ile | Microsoft | 2026-09-08 |
| CVE-2026-35189 | Excessive Memory Allocation in Relative CRLDP Processing | MEDIUM | 5.3 | 25%ile | Microsoft | 2026-09-08 |
| CVE-2026-42772 | Potential CPU DoS via O(n^2) Fragment Reassembly in QUIC | MEDIUM | 5.3 | 43%ile | Microsoft | 2026-09-08 |
| CVE-2026-75804 | QUIC Connection-Level Flow Control is Not Enforced for Streams | MEDIUM | 5.3 | 45%ile | Microsoft | 2026-09-08 |
| CVE-2026-75805 | NULL Pointer Dereference in CMP Client Revocation Response Handling | MEDIUM | 5.3 | 26%ile | Microsoft | 2026-09-08 |
| CVE-2026-75806 | Unauthenticated and Undersized DTLS 1.2 AEAD Record Causes DoS | MEDIUM | 5.3 | 66%ile | Microsoft | 2026-09-08 |
| CVE-2026-54872 | Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves | LOW | 3.7 | 39%ile | Microsoft | 2026-09-08 |
| CVE-2026-54875 | Non-Constant-Time SM2 Scalar Multiplication on ARM64 and RISC-V | LOW | 3.7 | 41%ile | Microsoft | 2026-09-08 |
| CVE-2026-77696 | Timing Side-Channel in SM2 Signature Generation | LOW | 3.7 | 34%ile | Microsoft | 2026-09-08 |
| CVE-2026-78124 | strongSwan 5.0.2 through 6.0.7 allows PKCS#7 certificate enumeration in the openssl plugin that leads to a lack of relea | LOW | 3.7 | 17%ile | Microsoft | 2026-09-08 |
| CVE-2026-80230 | OpenSSL pinning bypass | LOW | 3.7 | 31%ile | Microsoft | 2026-09-08 |
| CVE-2026-70454 | rsync < 3.5.0 TLS Certificate Validation Bypass via SSL/OpenSSL Mode | HIGH | 8.0 | 9%ile | Microsoft | 2026-08-11 |
| CVE-2026-54874 | Excessive Memory Use Buffering DTLS Records for a Future Epoch | HIGH | 7.5 | 50%ile | Microsoft | 2026-08-11 |
| CVE-2026-63072 | Heap Buffer Overflow in CMS Key Unwrapping | HIGH | 7.5 | 60%ile | Microsoft | 2026-08-11 |
| CVE-2026-63075 | QUIC ACK-only Packet Retention Can Cause Memory Exhaustion | HIGH | 7.5 | 47%ile | Microsoft | 2026-08-11 |
| CVE-2026-63076 | Invalid Pointer Dereference in CMP Server via Crafted protectionAlg | HIGH | 7.5 | 76%ile | Microsoft | 2026-08-11 |
| CVE-2026-63073 | Untrusted Sender DN Used as Format String in CMP Response Validation | HIGH | 7.4 | 67%ile | Microsoft | 2026-08-11 |
| CVE-2026-14663 | PostgreSQL pgcrypto, for OpenSSL-disabled ciphers, silently encrypts to and decrypts from cleartext | MEDIUM | 6.5 | 1%ile | Microsoft | 2026-08-11 |
| CVE-2026-53583 | libgit2: Inverted IP SubjectAltName Comparison in OpenSSL Backend | MEDIUM | 6.5 | 15%ile | Microsoft | 2026-08-11 |
| CVE-2026-63074 | CMP Indefinite Cache Growth of ExtraCerts | MEDIUM | 5.9 | 48%ile | Microsoft | 2026-08-11 |
| CVE-2026-59847 | Libssh: libssh: integrity downgrade via openssl aes-gcm tag verification | MEDIUM | 5.9 | 26%ile | Microsoft | 2026-07-14 |
| CVE-2026-14355 | ext/openssl: Memory corruption in openssl_encrypt with AES-WRAP-PAD | MEDIUM | 5.6 | 20%ile | Microsoft | 2026-07-14 |
| CVE-2026-45447 | Heap Use-After-Free in the PKCS7_verify() Function | HIGH | 8.8 | 90%ile | Microsoft | 2026-06-09 |
| CVE-2026-7383 | Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion | HIGH | 8.1 | 57%ile | Microsoft | 2026-06-09 |
| CVE-2026-34180 | Heap Buffer Over-read in ASN.1 Content Parsing | HIGH | 7.5 | 64%ile | Microsoft | 2026-06-09 |
| CVE-2026-34183 | Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler | HIGH | 7.5 | 64%ile | Microsoft | 2026-06-09 |
| CVE-2026-45445 | AES-OCB IV Ignored on EVP_Cipher() Path | HIGH | 7.5 | 53%ile | Microsoft | 2026-06-09 |
| CVE-2026-9076 | Out-of-Bounds Read in CMS Password-Based Decryption | HIGH | 7.5 | 53%ile | Microsoft | 2026-06-09 |
| CVE-2026-42766 | Possible NULL Dereference in Password-Based CMS Decryption | MEDIUM | 5.9 | 64%ile | Microsoft | 2026-06-09 |
| CVE-2026-42767 | NULL Pointer Dereference in CRMF EncryptedValue Decryption | MEDIUM | 5.9 | 46%ile | Microsoft | 2026-06-09 |
| CVE-2026-42769 | Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate | MEDIUM | 5.3 | 46%ile | Microsoft | 2026-06-09 |
| CVE-2026-45446 | Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes | MEDIUM | 4.8 | 38%ile | Microsoft | 2026-06-09 |
| CVE-2026-42768 | Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt() | LOW | 3.7 | 57%ile | Microsoft | 2026-06-09 |
| CVE-2026-42770 | FFC-DH Peer Validation Uses Attacker-Supplied q | LOW | 3.7 | 43%ile | Microsoft | 2026-06-09 |
| CVE-2026-44662 | rust-openssl: Heap buffer overflow when encrypting with AES key-wrap-with-padding | UNKNOWN | — | 7%ile | Microsoft | 2026-05-12 |
| CVE-2025-14575 | Uncontrolled Search Path Element in Qt Network OpenSSL TLS backend allows rogue CA certificate loading | UNKNOWN | — | 0%ile | Microsoft | 2026-05-12 |
| CVE-2025-3416 | Rust-openssl: rust-openssl use-after-free in `md::fetch` and `cipher::fetch` | LOW | 3.7 | 45%ile | Microsoft | 2025-04-08 |