Known vulnerabilities in OpenSSL
Vendor:
OpenSSL Software Foundation
Software:
OpenSSL
Software CPE:
cpe:2.3:a:openssl_software_foundation:openssl:*:*:*:*:*:*:*:*
Website:
https://www.openssl.org
Total vulnerabilities:
218
Public exploits:
26
Known exploited (KEV):
2
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
1.1.1zh
1.0.2zq
4.0.1
3.6.3
3.5.7
3.4.6
3.0.21
4.0.0
1.0.2zp
1.0.2zo
1.1.1zg
1.1.1zf
3.6.2
3.5.6
3.4.5
3.3.7
3.0.20
1.0.2zn
1.1.1ze
3.0.19
3.3.6
3.4.4
3.5.5
3.6.1
3.6.0
1.1.1zd
1.0.2zm
1.1.1zc
3.5.4
3.4.3
3.3.5
3.2.6
3.0.18
3.5.3
3.5.2
3.5.1
3.4.2
3.3.4
3.2.5
3.0.17
3.5.0
1.0.2zl
1.1.1zb
3.4.1
3.3.3
3.2.4
3.1.8
3.0.16
3.4.0
1.1.1za
1.1.1z
1.0.2zk
3.3.2
3.2.3
3.1.7
3.0.15
1.1.1y
3.3.1
3.2.2
3.1.6
3.0.14
3.3.0
1.0.2zj
1.1.1x
3.2.1
3.1.5
3.0.13
3.2.0
3.1.4
3.0.12
3.1.3
3.0.11
1.1.1w
1.0.2zi
1.1.1v
3.1.2
3.0.10
1.0.2zh
1.1.1u
3.1.1
3.0.9
3.1.0
1.0.2zg
3.0.8
1.1.1t
3.0.7
1.1.1s
3.0.6
1.1.1r
3.0.5
1.1.1q
3.0.4
1.0.2zf
1.1.1p
1.0.2ze
1.1.1o
3.0.3
1.0.2zc
1.0.2zb
1.0.2zd
3.0.2
1.1.1n
1.1.1m
3.0.1
3.0.0
1.0.2za
1.1.1l
1.1.1k
1.0.2y
1.1.1j
1.0.2x
1.1.1i
1.1.1h
1.0.2w
1.0.2v
1.1.1g
1.1.1f
1.1.1e
1.0.2u
1.1.1d
1.1.0l
1.0.2t
0.9.8f-5
0.9.8f-8
0.9.8f-4
0.9.8f-7
0.9.8f-6
0.9.8f-9
0.9.8f-3
0.9.8f-2
0.9.8f-1
0.9.8g-4
0.9.8c-8
0.9.8g-7
0.9.8g-9
0.9.8g-3
0.9.8c-7
0.9.8g-6
0.9.8g-5
0.9.8c-9
0.9.8g-8
0.9.8c-3
0.9.8g-2
0.9.8c-6
0.9.8g-1
0.9.8c-5
0.9.8c-2
0.9.8c-1
0.9.8c-4
0.9.8d-7
0.9.8d-6
0.9.8d-9
0.9.8d-8
0.9.8d-2
0.9.8d-5
0.9.8d-4
0.9.8d-1
0.9.8d-3
0.9.8e-6
0.9.8e-9
0.9.8e-5
0.9.8e-8
0.9.8e-7
0.9.8e-1
0.9.8e-4
0.9.8e-3
0.9.8e-2
0.9.7a-2
0.9.6b-3
0.9.6-15
1.0.1e-25.el7
1.1.1c
1.1.0k
1.0.2s
1.0.0t
0.9.8zh
0.9.8zd
1.1.1b
1.0.2r
1.0.2q
1.1.0j
1.1.1a
1.0.2p
1.0.2o
1.1.0i
1.1.0h
1.1.1
1.0.2n
1.0.2m
1.1.0g
1.1.0f
1.0.2l
1.1.0e
1.1.0c
1.1.0d
1.0.2k
1.0.1u
1.0.2j
1.0.2i
1.1.0b
1.1.0a
1.1.0
0.9.8zg
1.0.0s
0.9.8zf
1.0.0r
0.9.8ze
1.0.0p
1.0.0q
1.0.0o
0.9.8zc
1.0.0n
0.9.8z
0.9.8zb
0.9.8za
1.0.0m
0.9.1b
0.9.0b
1.0.0f
1.0.0e
1.0.0h
1.0.0g
1.0.0d
1.0.0c
1.0.0j
1.0.0i
1.0.0l
1.0.0k
0.9.8y
0.9.8x
0.9.8w
0.9.8v
0.9.8u
1.0.0b
1.0.0a
1.0
1.0.0
0.9.8t
0.9.8s
0.9.8r
0.9.8q
0.9.8l
0.9.8k
0.9.8j
0.9.8i
0.9.8p
0.9.8o
0.9.8n
0.9.8m
0.9.8d
0.9.8h
0.9.8g
0.9.8f
0.9.8e
0.9.7m
0.9.7l
0.9.7j
0.9.7k
0.9.7h
0.9.7i
0.9.8c
0.9.8a
0.9.8b
0.9.8
0.9.7g
0.9.7f
0.9.7e
0.9.3a
0.9.7d
0.9.5a
0.9.2b
0.9.1c
0.9.3
0.9.5
0.9.4
1.0.2g
1.0.2f
1.0.2e
1.0.2d
1.0.2c
1.0.2b
1.0.2a
1.0.2
1.0.1t
1.0.1s
1.0.1r
1.0.1q
1.0.1p
1.0.1o
1.0.1n
1.0.1m
1.0.1l
1.0.1k
1.0.1j
1.0.1i
1.0.1h
1.0.1g
1.0.1f
1.0.1e
1.0.1d
1.0.1c
1.0.1b
1.0.1a
1.0.1
0.9.6m
0.9.6j
0.9.6i
0.9.6h
0.9.6g
0.9.6f
0.9.7
0.9.7a
0.9.7b
0.9.7c
0.9.6k
0.9.6l
0.9.6e
0.9.6
0.9.6a
0.9.6b
0.9.6c
0.9.6d
1.0.2h
Vulnerabilities (218)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU134270 - Use After Free CVE-2026-45447 |
CWE-416 | High | 1.0.2zq, 1.1.1zh, 3.0.21, 3.4.6, 3.5.7, 3.6.3, 4.0.1 | 10.06.2026 |
SB20260610118 SB20260610119 SB20260610122 and 42 more |
||
| #VU134271 - Improper input validation CVE-2026-34182 |
CWE-20 | High | 3.0.21, 3.4.6, 3.5.7, 3.6.3, 4.0.1 | 10.06.2026 |
SB20260610118 SB20260610119 SB20260610122 and 18 more |
||
| #VU134272 - Allocation of Resources Without Limits or Throttling CVE-2026-34183 |
CWE-770 | Medium | 3.4.6, 3.5.7, 3.6.3, 4.0.1 | 10.06.2026 |
SB20260610118 SB20260610119 SB20260610123 and 9 more |
||
| #VU134273 - Double Free CVE-2026-35188 |
CWE-415 | Medium | 3.6.3, 4.0.1 | 10.06.2026 |
SB20260610118 |
||
| #VU134274 - NULL Pointer Dereference CVE-2026-42764 |
CWE-476 | Medium | 3.5.7, 3.6.3, 4.0.1 | 10.06.2026 |
SB20260610118 SB20260610119 SB20260610123 and 8 more |
||
| #VU134275 - Improper Initialization CVE-2026-45445 |
CWE-665 | Low | 3.0.21, 3.4.6, 3.5.7, 3.6.3, 4.0.1 | 10.06.2026 |
SB20260610118 SB20260610119 SB20260610123 and 17 more |
||
| #VU134276 - Heap-based Buffer Overflow CVE-2026-7383 |
CWE-122 | Low | 1.0.2zq, 1.1.1zh, 3.0.21, 3.4.6, 3.5.7, 3.6.3, 4.0.1 | 10.06.2026 |
SB20260610118 SB20260610119 SB20260610122 and 31 more |
||
| #VU134277 - Out-of-bounds read CVE-2026-9076 |
CWE-125 | Medium | 1.0.2zq, 1.1.1zh, 3.0.21, 3.4.6, 3.5.7, 3.6.3, 4.0.1 | 10.06.2026 |
SB20260610118 SB20260610119 SB20260610122 and 32 more |
||
| #VU134278 - Out-of-bounds read CVE-2026-34180 |
CWE-125 | Medium | 1.0.2zq, 1.1.1zh, 3.0.21, 3.4.6, 3.5.7, 3.6.3, 4.0.1 | 10.06.2026 |
SB20260610118 SB20260610119 SB20260610122 and 32 more |
||
| #VU134279 - Improper input validation CVE-2026-34181 |
CWE-20 | Medium | 3.4.6, 3.5.7, 3.6.3, 4.0.1 | 10.06.2026 |
SB20260610118 SB20260610119 SB20260610123 and 9 more |
||
| #VU134280 - NULL Pointer Dereference CVE-2026-42765 |
CWE-476 | Low | 3.6.3, 4.0.1 | 10.06.2026 |
SB20260610118 |
||
| #VU134281 - NULL Pointer Dereference CVE-2026-42766 |
CWE-476 | Medium | 1.0.2zq, 1.1.1zh, 3.0.21, 3.4.6, 3.5.7, 3.6.3, 4.0.1 | 10.06.2026 |
SB20260610118 SB20260610119 SB20260610122 and 33 more |
||
| #VU134282 - NULL Pointer Dereference CVE-2026-42767 |
CWE-476 | Medium | 3.0.21, 3.4.6, 3.5.7, 3.6.3, 4.0.1 | 10.06.2026 |
SB20260610118 SB20260610119 SB20260610122 and 20 more |
||
| #VU134283 - Observable discrepancy CVE-2026-42768 |
CWE-203 | Medium | 3.4.6, 3.5.7, 3.6.3, 4.0.1 | 10.06.2026 |
SB20260610118 SB20260610119 SB20260610123 and 14 more |
||
| #VU134284 - Improper Certificate Validation CVE-2026-42769 |
CWE-295 | Low | 3.4.6, 3.5.7, 3.6.3, 4.0.1 | 10.06.2026 |
SB20260610118 SB20260610119 SB20260610123 and 9 more |
||
| #VU134285 - Improper input validation CVE-2026-42770 |
CWE-20 | Medium | 3.0.21, 3.4.6, 3.5.7, 3.6.3, 4.0.1 | 10.06.2026 |
SB20260610118 SB20260610119 SB20260610123 and 17 more |
||
| #VU134286 - Out-of-bounds read CVE-2026-42771 |
CWE-125 | Low | 4.0.1 | 10.06.2026 |
SB20260610118 |
||
| #VU134287 - Improper Verification of Cryptographic Signature CVE-2026-45446 |
CWE-347 | Medium | 3.0.21, 3.4.6, 3.5.7, 3.6.3, 4.0.1 | 10.06.2026 |
SB20260610118 SB20260610119 SB20260610123 and 15 more |
||
| #VU125562 - Unchecked Return Value CVE-2026-31790 |
CWE-252 | Medium | 3.0.20, 3.3.7, 3.4.5, 3.5.6, 3.6.2 | 09.04.2026 |
SB2026040943 SB2026040944 SB2026040945 and 25 more |
||
| #VU125561 - Always-Incorrect Control Flow Implementation CVE-2026-2673 |
CWE-670 | Low | 3.5.6, 3.6.2 | 09.04.2026 |
SB2026040943 SB2026040944 SB20260409112 and 4 more |
Showing elements 1 - 20 out of 218