Known vulnerabilities in OpenSSL - page 2
Vendor:
OpenSSL Software Foundation
Software:
OpenSSL
Software CPE:
cpe:2.3:a:openssl_software_foundation:openssl:*:*:*:*:*:*:*:*
Website:
https://www.openssl.org
Total vulnerabilities:
220
Public exploits:
26
Known exploited (KEV):
2
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
1.1.1zh
1.0.2zq
4.0.1
3.6.3
3.5.7
3.4.6
3.0.21
4.0.0
1.0.2zp
1.0.2zo
1.1.1zg
1.1.1zf
3.6.2
3.5.6
3.4.5
3.3.7
3.0.20
1.0.2zn
1.1.1ze
3.0.19
3.3.6
3.4.4
3.5.5
3.6.1
3.6.0
1.1.1zd
1.0.2zm
1.1.1zc
3.5.4
3.4.3
3.3.5
3.2.6
3.0.18
3.5.3
3.5.2
3.5.1
3.4.2
3.3.4
3.2.5
3.0.17
3.5.0
1.0.2zl
1.1.1zb
3.4.1
3.3.3
3.2.4
3.1.8
3.0.16
3.4.0
1.1.1za
1.1.1z
1.0.2zk
3.3.2
3.2.3
3.1.7
3.0.15
1.1.1y
3.3.1
3.2.2
3.1.6
3.0.14
3.3.0
1.0.2zj
1.1.1x
3.2.1
3.1.5
3.0.13
3.2.0
3.1.4
3.0.12
3.1.3
3.0.11
1.1.1w
1.0.2zi
1.1.1v
3.1.2
3.0.10
1.0.2zh
1.1.1u
3.1.1
3.0.9
3.1.0
1.0.2zg
3.0.8
1.1.1t
3.0.7
1.1.1s
3.0.6
1.1.1r
3.0.5
1.1.1q
3.0.4
1.0.2zf
1.1.1p
1.0.2ze
1.1.1o
3.0.3
1.0.2zc
1.0.2zb
1.0.2zd
3.0.2
1.1.1n
1.1.1m
3.0.1
3.0.0
1.0.2za
1.1.1l
1.1.1k
1.0.2y
1.1.1j
1.0.2x
1.1.1i
1.1.1h
1.0.2w
1.0.2v
1.1.1g
1.1.1f
1.1.1e
1.0.2u
1.1.1d
1.1.0l
1.0.2t
0.9.8f-5
0.9.8f-8
0.9.8f-4
0.9.8f-7
0.9.8f-6
0.9.8f-9
0.9.8f-3
0.9.8f-2
0.9.8f-1
0.9.8g-4
0.9.8c-8
0.9.8g-7
0.9.8g-9
0.9.8g-3
0.9.8c-7
0.9.8g-6
0.9.8g-5
0.9.8c-9
0.9.8g-8
0.9.8c-3
0.9.8g-2
0.9.8c-6
0.9.8g-1
0.9.8c-5
0.9.8c-2
0.9.8c-1
0.9.8c-4
0.9.8d-7
0.9.8d-6
0.9.8d-9
0.9.8d-8
0.9.8d-2
0.9.8d-5
0.9.8d-4
0.9.8d-1
0.9.8d-3
0.9.8e-6
0.9.8e-9
0.9.8e-5
0.9.8e-8
0.9.8e-7
0.9.8e-1
0.9.8e-4
0.9.8e-3
0.9.8e-2
0.9.7a-2
0.9.6b-3
0.9.6-15
1.0.1e-25.el7
1.1.1c
1.1.0k
1.0.2s
1.0.0t
0.9.8zh
0.9.8zd
1.1.1b
1.0.2r
1.0.2q
1.1.0j
1.1.1a
1.0.2p
1.0.2o
1.1.0i
1.1.0h
1.1.1
1.0.2n
1.0.2m
1.1.0g
1.1.0f
1.0.2l
1.1.0e
1.1.0c
1.1.0d
1.0.2k
1.0.1u
1.0.2j
1.0.2i
1.1.0b
1.1.0a
1.1.0
0.9.8zg
1.0.0s
0.9.8zf
1.0.0r
0.9.8ze
1.0.0p
1.0.0q
1.0.0o
0.9.8zc
1.0.0n
0.9.8z
0.9.8zb
0.9.8za
1.0.0m
0.9.1b
0.9.0b
1.0.0f
1.0.0e
1.0.0h
1.0.0g
1.0.0d
1.0.0c
1.0.0j
1.0.0i
1.0.0l
1.0.0k
0.9.8y
0.9.8x
0.9.8w
0.9.8v
0.9.8u
1.0.0b
1.0.0a
1.0
1.0.0
0.9.8t
0.9.8s
0.9.8r
0.9.8q
0.9.8l
0.9.8k
0.9.8j
0.9.8i
0.9.8p
0.9.8o
0.9.8n
0.9.8m
0.9.8d
0.9.8h
0.9.8g
0.9.8f
0.9.8e
0.9.7m
0.9.7l
0.9.7j
0.9.7k
0.9.7h
0.9.7i
0.9.8c
0.9.8a
0.9.8b
0.9.8
0.9.7g
0.9.7f
0.9.7e
0.9.3a
0.9.7d
0.9.5a
0.9.2b
0.9.1c
0.9.3
0.9.5
0.9.4
1.0.2g
1.0.2f
1.0.2e
1.0.2d
1.0.2c
1.0.2b
1.0.2a
1.0.2
1.0.1t
1.0.1s
1.0.1r
1.0.1q
1.0.1p
1.0.1o
1.0.1n
1.0.1m
1.0.1l
1.0.1k
1.0.1j
1.0.1i
1.0.1h
1.0.1g
1.0.1f
1.0.1e
1.0.1d
1.0.1c
1.0.1b
1.0.1a
1.0.1
0.9.6m
0.9.6j
0.9.6i
0.9.6h
0.9.6g
0.9.6f
0.9.7
0.9.7a
0.9.7b
0.9.7c
0.9.6k
0.9.6l
0.9.6e
0.9.6
0.9.6a
0.9.6b
0.9.6c
0.9.6d
1.0.2h
Vulnerabilities (220)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU125562 - Unchecked Return Value CVE-2026-31790 |
CWE-252 | Medium | 3.0.20, 3.3.7, 3.4.5, 3.5.6, 3.6.2 | 09.04.2026 |
SB2026040943 SB2026040944 SB2026040945 and 27 more |
||
| #VU125563 - Out-of-bounds read CVE-2026-28386 |
CWE-125 | Low | 3.6.2 | 09.04.2026 |
SB2026040943 |
||
| #VU125564 - Use After Free CVE-2026-28387 |
CWE-416 | High | 1.1.1zg, 3.0.20, 3.3.7, 3.4.5, 3.5.6, 3.6.2 | 09.04.2026 |
SB2026040943 SB2026040944 SB2026040945 and 30 more |
||
| #VU125565 - NULL Pointer Dereference CVE-2026-28388 |
CWE-476 | Low | 1.0.2zp, 1.1.1zg, 3.0.20, 3.3.7, 3.4.5, 3.5.6, 3.6.2 | 09.04.2026 |
SB2026040943 SB2026040944 SB2026040945 and 39 more |
||
| #VU125566 - NULL Pointer Dereference CVE-2026-28389 |
CWE-476 | Medium | 1.0.2zp, 1.1.1zg, 3.0.20, 3.3.7, 3.4.5, 3.5.6, 3.6.2 | 09.04.2026 |
SB2026040943 SB2026040944 SB2026040945 and 32 more |
||
| #VU125567 - NULL Pointer Dereference CVE-2026-28390 |
CWE-476 | Medium | 1.0.2zp, 1.1.1zg, 3.0.20, 3.3.7, 3.4.5, 3.5.6, 3.6.2 | 09.04.2026 |
SB2026040943 SB2026040944 SB2026040992 and 49 more |
||
| #VU125568 - Heap-based Buffer Overflow CVE-2026-31789 |
CWE-122 | Medium | 3.0.20, 3.3.7, 3.4.5, 3.5.6, 3.6.2 | 09.04.2026 |
SB2026040943 SB2026040944 SB2026040945 and 23 more |
||
| #VU125561 - Always-Incorrect Control Flow Implementation CVE-2026-2673 |
CWE-670 | Low | 3.5.6, 3.6.2 | 09.04.2026 |
SB2026040943 SB2026040944 SB20260409112 and 4 more |
||
| #VU122086 - Type confusion CVE-2026-22796 |
CWE-843 | Medium | 1.0.2zn, 1.1.1ze, 3.0.19, 3.3.6, 3.4.4, 3.5.5, 3.6.1 | 27.01.2026 |
SB2026012785 SB2026012791 SB2026012792 and 51 more |
||
| #VU122085 - NULL Pointer Dereference CVE-2026-22795 |
CWE-476 | Medium | 1.1.1ze, 3.0.19, 3.3.6, 3.4.4, 3.5.5, 3.6.1 | 27.01.2026 |
SB2026012785 SB2026012791 SB2026012792 and 48 more |
||
| #VU122084 - NULL Pointer Dereference CVE-2025-69421 |
CWE-476 | Medium | 1.0.2zn, 1.1.1ze, 3.0.19, 3.3.6, 3.4.4, 3.5.5, 3.6.1 | 27.01.2026 |
SB2026012785 SB2026012791 SB2026012792 and 50 more |
||
| #VU122083 - Type confusion CVE-2025-69420 |
CWE-843 | Medium | 1.1.1ze, 3.0.19, 3.3.6, 3.4.4, 3.5.5, 3.6.1 | 27.01.2026 |
SB2026012785 SB2026012791 SB2026012792 and 49 more |
||
| #VU122082 - Out-of-bounds write CVE-2025-69419 |
CWE-787 | Low | 1.1.1ze, 3.0.19, 3.3.6, 3.4.4, 3.5.5, 3.6.1 | 27.01.2026 |
SB2026012785 SB2026012791 SB2026012792 and 69 more |
||
| #VU122081 - Cleartext Transmission of Sensitive Information CVE-2025-69418 |
CWE-319 | Low | 1.1.1ze, 3.0.19, 3.3.6, 3.4.4, 3.5.5, 3.6.1 | 27.01.2026 |
SB2026012785 SB2026012791 SB2026012792 and 46 more |
||
| #VU122080 - Out-of-bounds write CVE-2025-68160 |
CWE-787 | Medium | 1.0.2zn, 1.1.1ze, 3.0.19, 3.3.6, 3.4.4, 3.5.5, 3.6.1 | 27.01.2026 |
SB2026012785 SB2026012791 SB2026012792 and 49 more |
||
| #VU122079 - Resource exhaustion CVE-2025-66199 |
CWE-400 | Medium | 3.3.6, 3.4.4, 3.5.5, 3.6.1 | 27.01.2026 |
SB2026012785 SB2026012791 SB2026012792 and 17 more |
||
| #VU122078 - Numeric Truncation Error CVE-2025-15469 |
CWE-197 | Low | 3.5.5, 3.6.1 | 27.01.2026 |
SB2026012785 SB2026012791 SB2026012792 and 14 more |
||
| #VU122077 - NULL Pointer Dereference CVE-2025-15468 |
CWE-476 | Medium | 3.3.6, 3.4.4, 3.5.5, 3.6.1 | 27.01.2026 |
SB2026012785 SB2026012791 SB2026012792 and 18 more |
||
| #VU122076 - Stack-based buffer overflow CVE-2025-15467 |
CWE-121 | High | 3.0.19, 3.3.6, 3.4.4, 3.5.5, 3.6.1 | 27.01.2026 |
SB2026012785 SB2026012791 SB2026012792 and 65 more |
||
| #VU122075 - Stack-based buffer overflow CVE-2025-11187 |
CWE-121 | Medium | 3.4.4, 3.5.5, 3.6.1 | 27.01.2026 |
SB2026012785 SB2026012791 SB2026012792 and 19 more |
Showing elements 21 - 40 out of 220