Known vulnerabilities in OpenSSL - page 2

Software: OpenSSL
Software CPE: cpe:2.3:a:openssl_software_foundation:openssl:*:*:*:*:*:*:*:*
Total vulnerabilities: 220
Public exploits: 26
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting OpenSSL OpenSSL is affected by 220 known vulnerabilities: 2 critical, 15 high, 130 medium, 73 low Critical High Medium Low

Vulnerabilities (220)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU125562 - Unchecked Return Value
CVE-2026-31790
CWE-252 Medium
No
No
3.0.20, 3.3.7, 3.4.5, 3.5.6, 3.6.2 09.04.2026 SB2026040943
SB2026040944
SB2026040945
and 27 more
#VU125563 - Out-of-bounds read
CVE-2026-28386
CWE-125 Low
No
No
3.6.2 09.04.2026 SB2026040943
#VU125564 - Use After Free
CVE-2026-28387
CWE-416 High
No
No
1.1.1zg, 3.0.20, 3.3.7, 3.4.5, 3.5.6, 3.6.2 09.04.2026 SB2026040943
SB2026040944
SB2026040945
and 30 more
#VU125565 - NULL Pointer Dereference
CVE-2026-28388
CWE-476 Low
No
No
1.0.2zp, 1.1.1zg, 3.0.20, 3.3.7, 3.4.5, 3.5.6, 3.6.2 09.04.2026 SB2026040943
SB2026040944
SB2026040945
and 39 more
#VU125566 - NULL Pointer Dereference
CVE-2026-28389
CWE-476 Medium
No
No
1.0.2zp, 1.1.1zg, 3.0.20, 3.3.7, 3.4.5, 3.5.6, 3.6.2 09.04.2026 SB2026040943
SB2026040944
SB2026040945
and 32 more
#VU125567 - NULL Pointer Dereference
CVE-2026-28390
CWE-476 Medium
No
No
1.0.2zp, 1.1.1zg, 3.0.20, 3.3.7, 3.4.5, 3.5.6, 3.6.2 09.04.2026 SB2026040943
SB2026040944
SB2026040992
and 49 more
#VU125568 - Heap-based Buffer Overflow
CVE-2026-31789
CWE-122 Medium
No
No
3.0.20, 3.3.7, 3.4.5, 3.5.6, 3.6.2 09.04.2026 SB2026040943
SB2026040944
SB2026040945
and 23 more
#VU125561 - Always-Incorrect Control Flow Implementation
CVE-2026-2673
CWE-670 Low
No
No
3.5.6, 3.6.2 09.04.2026 SB2026040943
SB2026040944
SB20260409112
and 4 more
#VU122086 - Type confusion
CVE-2026-22796
CWE-843 Medium
No
No
1.0.2zn, 1.1.1ze, 3.0.19, 3.3.6, 3.4.4, 3.5.5, 3.6.1 27.01.2026 SB2026012785
SB2026012791
SB2026012792
and 51 more
#VU122085 - NULL Pointer Dereference
CVE-2026-22795
CWE-476 Medium
No
No
1.1.1ze, 3.0.19, 3.3.6, 3.4.4, 3.5.5, 3.6.1 27.01.2026 SB2026012785
SB2026012791
SB2026012792
and 48 more
#VU122084 - NULL Pointer Dereference
CVE-2025-69421
CWE-476 Medium
No
No
1.0.2zn, 1.1.1ze, 3.0.19, 3.3.6, 3.4.4, 3.5.5, 3.6.1 27.01.2026 SB2026012785
SB2026012791
SB2026012792
and 50 more
#VU122083 - Type confusion
CVE-2025-69420
CWE-843 Medium
No
No
1.1.1ze, 3.0.19, 3.3.6, 3.4.4, 3.5.5, 3.6.1 27.01.2026 SB2026012785
SB2026012791
SB2026012792
and 49 more
#VU122082 - Out-of-bounds write
CVE-2025-69419
CWE-787 Low
No
No
1.1.1ze, 3.0.19, 3.3.6, 3.4.4, 3.5.5, 3.6.1 27.01.2026 SB2026012785
SB2026012791
SB2026012792
and 69 more
#VU122081 - Cleartext Transmission of Sensitive Information
CVE-2025-69418
CWE-319 Low
No
No
1.1.1ze, 3.0.19, 3.3.6, 3.4.4, 3.5.5, 3.6.1 27.01.2026 SB2026012785
SB2026012791
SB2026012792
and 46 more
#VU122080 - Out-of-bounds write
CVE-2025-68160
CWE-787 Medium
No
No
1.0.2zn, 1.1.1ze, 3.0.19, 3.3.6, 3.4.4, 3.5.5, 3.6.1 27.01.2026 SB2026012785
SB2026012791
SB2026012792
and 49 more
#VU122079 - Resource exhaustion
CVE-2025-66199
CWE-400 Medium
No
No
3.3.6, 3.4.4, 3.5.5, 3.6.1 27.01.2026 SB2026012785
SB2026012791
SB2026012792
and 17 more
#VU122078 - Numeric Truncation Error
CVE-2025-15469
CWE-197 Low
No
No
3.5.5, 3.6.1 27.01.2026 SB2026012785
SB2026012791
SB2026012792
and 14 more
#VU122077 - NULL Pointer Dereference
CVE-2025-15468
CWE-476 Medium
No
No
3.3.6, 3.4.4, 3.5.5, 3.6.1 27.01.2026 SB2026012785
SB2026012791
SB2026012792
and 18 more
#VU122076 - Stack-based buffer overflow
CVE-2025-15467
CWE-121 High
Available
No
3.0.19, 3.3.6, 3.4.4, 3.5.5, 3.6.1 27.01.2026 SB2026012785
SB2026012791
SB2026012792
and 65 more
#VU122075 - Stack-based buffer overflow
CVE-2025-11187
CWE-121 Medium
No
No
3.4.4, 3.5.5, 3.6.1 27.01.2026 SB2026012785
SB2026012791
SB2026012792
and 19 more


Showing elements 21 - 40 out of 220