Known vulnerabilities in OpenSSL - page 2

Software: OpenSSL
Software CPE: cpe:2.3:a:openssl_software_foundation:openssl:*:*:*:*:*:*:*:*
Total vulnerabilities: 243
Public exploits: 26
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting OpenSSL OpenSSL is affected by 243 known vulnerabilities: 2 critical, 15 high, 146 medium, 80 low Critical High Medium Low

Vulnerabilities (243)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU145422 - Allocation of Resources Without Limits or Throttling
CVE-2026-63074
CWE-770 Low
No
No
3.0.22, 3.4.7, 3.5.8, 3.6.4, 4.0.2 26.08.2026 SB2026082627
SB2026082629
SB2026082636
and 11 more
#VU145423 - Allocation of Resources Without Limits or Throttling
CVE-2026-63075
CWE-770 Low
No
No
3.4.7, 3.5.8, 3.6.4, 4.0.2 26.08.2026 SB2026082627
SB2026082629
SB2026082636
and 4 more
#VU145424 - Improper Validation of Integrity Check Value
CVE-2026-75803
CWE-354 Low
No
No
3.0.22, 3.4.7, 3.5.8, 3.6.4, 4.0.2 26.08.2026 SB2026082627
SB2026082629
SB2026082670
and 10 more
#VU143573 - Allocation of Resources Without Limits or Throttling
CVE-2026-14456
CWE-770 Medium
No
No
3.5.8, 3.6.4, 4.0.2 16.08.2026 SB20260816509
SB2026082629
SB2026082670
and 3 more
#VU143572 - Missing release of memory after effective lifetime
CVE-2026-54876
CWE-401 Medium
No
No
3.6.4, 4.0.2 16.08.2026 SB20260816509
#VU134270 - Use After Free
CVE-2026-45447
CWE-416 High
No
No
1.0.2zq, 1.1.1zh, 3.0.21, 3.4.6, 3.5.7, 3.6.3, 4.0.1 10.06.2026 SB20260610118
SB20260610119
SB20260610122
and 48 more
#VU134273 - Double Free
CVE-2026-35188
CWE-415 Medium
No
No
3.6.3, 4.0.1 10.06.2026 SB20260610118
#VU134274 - NULL Pointer Dereference
CVE-2026-42764
CWE-476 Medium
No
No
3.5.7, 3.6.3, 4.0.1 10.06.2026 SB20260610118
SB20260610119
SB20260610123
and 14 more
#VU134275 - Improper Initialization
CVE-2026-45445
CWE-665 Low
No
No
3.0.21, 3.4.6, 3.5.7, 3.6.3, 4.0.1 10.06.2026 SB20260610118
SB20260610119
SB20260610123
and 23 more
#VU134276 - Heap-based Buffer Overflow
CVE-2026-7383
CWE-122 Low
No
No
1.0.2zq, 1.1.1zh, 3.0.21, 3.4.6, 3.5.7, 3.6.3, 4.0.1 10.06.2026 SB20260610118
SB20260610119
SB20260610122
and 35 more
#VU134277 - Out-of-bounds read
CVE-2026-9076
CWE-125 Medium
No
No
1.0.2zq, 1.1.1zh, 3.0.21, 3.4.6, 3.5.7, 3.6.3, 4.0.1 10.06.2026 SB20260610118
SB20260610119
SB20260610122
and 36 more
#VU134278 - Out-of-bounds read
CVE-2026-34180
CWE-125 Medium
No
No
1.0.2zq, 1.1.1zh, 3.0.21, 3.4.6, 3.5.7, 3.6.3, 4.0.1 10.06.2026 SB20260610118
SB20260610119
SB20260610122
and 36 more
#VU134279 - Improper input validation
CVE-2026-34181
CWE-20 Medium
No
No
3.4.6, 3.5.7, 3.6.3, 4.0.1 10.06.2026 SB20260610118
SB20260610119
SB20260610123
and 14 more
#VU134280 - NULL Pointer Dereference
CVE-2026-42765
CWE-476 Low
No
No
3.6.3, 4.0.1 10.06.2026 SB20260610118
#VU134281 - NULL Pointer Dereference
CVE-2026-42766
CWE-476 Medium
No
No
1.0.2zq, 1.1.1zh, 3.0.21, 3.4.6, 3.5.7, 3.6.3, 4.0.1 10.06.2026 SB20260610118
SB20260610119
SB20260610122
and 37 more
#VU134282 - NULL Pointer Dereference
CVE-2026-42767
CWE-476 Medium
No
No
3.0.21, 3.4.6, 3.5.7, 3.6.3, 4.0.1 10.06.2026 SB20260610118
SB20260610119
SB20260610122
and 24 more
#VU134283 - Observable discrepancy
CVE-2026-42768
CWE-203 Medium
No
No
3.4.6, 3.5.7, 3.6.3, 4.0.1 10.06.2026 SB20260610118
SB20260610119
SB20260610123
and 18 more
#VU134284 - Improper Certificate Validation
CVE-2026-42769
CWE-295 Low
No
No
3.4.6, 3.5.7, 3.6.3, 4.0.1 10.06.2026 SB20260610118
SB20260610119
SB20260610123
and 13 more
#VU134285 - Improper input validation
CVE-2026-42770
CWE-20 Medium
No
No
3.0.21, 3.4.6, 3.5.7, 3.6.3, 4.0.1 10.06.2026 SB20260610118
SB20260610119
SB20260610123
and 21 more
#VU134286 - Out-of-bounds read
CVE-2026-42771
CWE-125 Low
No
No
4.0.1 10.06.2026 SB20260610118


Showing elements 21 - 40 out of 243