Known vulnerabilities in OpenSSL

Software: OpenSSL
Software CPE: cpe:2.3:a:openssl_software_foundation:openssl:*:*:*:*:*:*:*:*
Total vulnerabilities: 220
Public exploits: 26
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting OpenSSL OpenSSL is affected by 220 known vulnerabilities: 2 critical, 15 high, 130 medium, 73 low Critical High Medium Low

Vulnerabilities (220)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU143573 - Allocation of Resources Without Limits or Throttling
CVE-2026-14456
CWE-770 Medium
No
No
- 16.08.2026 SB20260816509
#VU143572 - Missing release of memory after effective lifetime
CVE-2026-54876
CWE-401 Medium
No
No
- 16.08.2026 SB20260816509
#VU134270 - Use After Free
CVE-2026-45447
CWE-416 High
No
No
1.0.2zq, 1.1.1zh, 3.0.21, 3.4.6, 3.5.7, 3.6.3, 4.0.1 10.06.2026 SB20260610118
SB20260610119
SB20260610122
and 44 more
#VU134271 - Improper input validation
CVE-2026-34182
CWE-20 High
No
No
3.0.21, 3.4.6, 3.5.7, 3.6.3, 4.0.1 10.06.2026 SB20260610118
SB20260610119
SB20260610122
and 19 more
#VU134272 - Allocation of Resources Without Limits or Throttling
CVE-2026-34183
CWE-770 Medium
No
No
3.4.6, 3.5.7, 3.6.3, 4.0.1 10.06.2026 SB20260610118
SB20260610119
SB20260610123
and 10 more
#VU134273 - Double Free
CVE-2026-35188
CWE-415 Medium
No
No
3.6.3, 4.0.1 10.06.2026 SB20260610118
#VU134274 - NULL Pointer Dereference
CVE-2026-42764
CWE-476 Medium
No
No
3.5.7, 3.6.3, 4.0.1 10.06.2026 SB20260610118
SB20260610119
SB20260610123
and 9 more
#VU134275 - Improper Initialization
CVE-2026-45445
CWE-665 Low
No
No
3.0.21, 3.4.6, 3.5.7, 3.6.3, 4.0.1 10.06.2026 SB20260610118
SB20260610119
SB20260610123
and 18 more
#VU134276 - Heap-based Buffer Overflow
CVE-2026-7383
CWE-122 Low
No
No
1.0.2zq, 1.1.1zh, 3.0.21, 3.4.6, 3.5.7, 3.6.3, 4.0.1 10.06.2026 SB20260610118
SB20260610119
SB20260610122
and 32 more
#VU134277 - Out-of-bounds read
CVE-2026-9076
CWE-125 Medium
No
No
1.0.2zq, 1.1.1zh, 3.0.21, 3.4.6, 3.5.7, 3.6.3, 4.0.1 10.06.2026 SB20260610118
SB20260610119
SB20260610122
and 33 more
#VU134278 - Out-of-bounds read
CVE-2026-34180
CWE-125 Medium
No
No
1.0.2zq, 1.1.1zh, 3.0.21, 3.4.6, 3.5.7, 3.6.3, 4.0.1 10.06.2026 SB20260610118
SB20260610119
SB20260610122
and 33 more
#VU134279 - Improper input validation
CVE-2026-34181
CWE-20 Medium
No
No
3.4.6, 3.5.7, 3.6.3, 4.0.1 10.06.2026 SB20260610118
SB20260610119
SB20260610123
and 10 more
#VU134280 - NULL Pointer Dereference
CVE-2026-42765
CWE-476 Low
No
No
3.6.3, 4.0.1 10.06.2026 SB20260610118
#VU134281 - NULL Pointer Dereference
CVE-2026-42766
CWE-476 Medium
No
No
1.0.2zq, 1.1.1zh, 3.0.21, 3.4.6, 3.5.7, 3.6.3, 4.0.1 10.06.2026 SB20260610118
SB20260610119
SB20260610122
and 34 more
#VU134282 - NULL Pointer Dereference
CVE-2026-42767
CWE-476 Medium
No
No
3.0.21, 3.4.6, 3.5.7, 3.6.3, 4.0.1 10.06.2026 SB20260610118
SB20260610119
SB20260610122
and 21 more
#VU134283 - Observable discrepancy
CVE-2026-42768
CWE-203 Medium
No
No
3.4.6, 3.5.7, 3.6.3, 4.0.1 10.06.2026 SB20260610118
SB20260610119
SB20260610123
and 15 more
#VU134284 - Improper Certificate Validation
CVE-2026-42769
CWE-295 Low
No
No
3.4.6, 3.5.7, 3.6.3, 4.0.1 10.06.2026 SB20260610118
SB20260610119
SB20260610123
and 10 more
#VU134285 - Improper input validation
CVE-2026-42770
CWE-20 Medium
No
No
3.0.21, 3.4.6, 3.5.7, 3.6.3, 4.0.1 10.06.2026 SB20260610118
SB20260610119
SB20260610123
and 18 more
#VU134286 - Out-of-bounds read
CVE-2026-42771
CWE-125 Low
No
No
4.0.1 10.06.2026 SB20260610118
#VU134287 - Improper Verification of Cryptographic Signature
CVE-2026-45446
CWE-347 Medium
No
No
3.0.21, 3.4.6, 3.5.7, 3.6.3, 4.0.1 10.06.2026 SB20260610118
SB20260610119
SB20260610123
and 16 more


Showing elements 1 - 20 out of 220