Known vulnerabilities in OpenSSL - page 3
Vendor:
OpenSSL Software Foundation
Software:
OpenSSL
Software CPE:
cpe:2.3:a:openssl_software_foundation:openssl:*:*:*:*:*:*:*:*
Website:
https://www.openssl.org
Total vulnerabilities:
243
Public exploits:
26
Known exploited (KEV):
2
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
1.0.2zs
1.1.1zj
3.0.23
3.4.8
3.5.9
3.6.5
4.0.3
1.0.2zr
1.1.1zi
4.0.2
3.6.4
3.5.8
3.4.7
3.0.22
1.1.1zh
1.0.2zq
4.0.1
3.6.3
3.5.7
3.4.6
3.0.21
4.0.0
1.0.2zp
1.0.2zo
1.1.1zg
1.1.1zf
3.6.2
3.5.6
3.4.5
3.3.7
3.0.20
1.0.2zn
1.1.1ze
3.0.19
3.3.6
3.4.4
3.5.5
3.6.1
3.6.0
1.1.1zd
1.0.2zm
1.1.1zc
3.5.4
3.4.3
3.3.5
3.2.6
3.0.18
3.5.3
3.5.2
3.5.1
3.4.2
3.3.4
3.2.5
3.0.17
3.5.0
1.0.2zl
1.1.1zb
3.4.1
3.3.3
3.2.4
3.1.8
3.0.16
3.4.0
1.1.1za
1.1.1z
1.0.2zk
3.3.2
3.2.3
3.1.7
3.0.15
1.1.1y
3.3.1
3.2.2
3.1.6
3.0.14
3.3.0
1.0.2zj
1.1.1x
3.2.1
3.1.5
3.0.13
3.2.0
3.1.4
3.0.12
3.1.3
3.0.11
1.1.1w
1.0.2zi
1.1.1v
3.1.2
3.0.10
1.0.2zh
1.1.1u
3.1.1
3.0.9
3.1.0
1.0.2zg
3.0.8
1.1.1t
3.0.7
1.1.1s
3.0.6
1.1.1r
3.0.5
1.1.1q
3.0.4
1.0.2zf
1.1.1p
1.0.2ze
1.1.1o
3.0.3
1.0.2zc
1.0.2zb
1.0.2zd
3.0.2
1.1.1n
1.1.1m
3.0.1
3.0.0
1.0.2za
1.1.1l
1.1.1k
1.0.2y
1.1.1j
1.0.2x
1.1.1i
1.1.1h
1.0.2w
1.0.2v
1.1.1g
1.1.1f
1.1.1e
1.0.2u
1.1.1d
1.1.0l
1.0.2t
0.9.8f-5
0.9.8f-8
0.9.8f-4
0.9.8f-7
0.9.8f-6
0.9.8f-9
0.9.8f-3
0.9.8f-2
0.9.8f-1
0.9.8g-4
0.9.8c-8
0.9.8g-7
0.9.8g-9
0.9.8g-3
0.9.8c-7
0.9.8g-6
0.9.8g-5
0.9.8c-9
0.9.8g-8
0.9.8c-3
0.9.8g-2
0.9.8c-6
0.9.8g-1
0.9.8c-5
0.9.8c-2
0.9.8c-1
0.9.8c-4
0.9.8d-7
0.9.8d-6
0.9.8d-9
0.9.8d-8
0.9.8d-2
0.9.8d-5
0.9.8d-4
0.9.8d-1
0.9.8d-3
0.9.8e-6
0.9.8e-9
0.9.8e-5
0.9.8e-8
0.9.8e-7
0.9.8e-1
0.9.8e-4
0.9.8e-3
0.9.8e-2
0.9.7a-2
0.9.6b-3
0.9.6-15
1.0.1e-25.el7
1.1.1c
1.1.0k
1.0.2s
1.0.0t
0.9.8zh
0.9.8zd
1.1.1b
1.0.2r
1.0.2q
1.1.0j
1.1.1a
1.0.2p
1.0.2o
1.1.0i
1.1.0h
1.1.1
1.0.2n
1.0.2m
1.1.0g
1.1.0f
1.0.2l
1.1.0e
1.1.0c
1.1.0d
1.0.2k
1.0.1u
1.0.2j
1.0.2i
1.1.0b
1.1.0a
1.1.0
0.9.8zg
1.0.0s
0.9.8zf
1.0.0r
0.9.8ze
1.0.0p
1.0.0q
1.0.0o
0.9.8zc
1.0.0n
0.9.8z
0.9.8zb
0.9.8za
1.0.0m
0.9.1b
0.9.0b
1.0.0f
1.0.0e
1.0.0h
1.0.0g
1.0.0d
1.0.0c
1.0.0j
1.0.0i
1.0.0l
1.0.0k
0.9.8y
0.9.8x
0.9.8w
0.9.8v
0.9.8u
1.0.0b
1.0.0a
1.0
1.0.0
0.9.8t
0.9.8s
0.9.8r
0.9.8q
0.9.8l
0.9.8k
0.9.8j
0.9.8i
0.9.8p
0.9.8o
0.9.8n
0.9.8m
0.9.8d
0.9.8h
0.9.8g
0.9.8f
0.9.8e
0.9.7m
0.9.7l
0.9.7j
0.9.7k
0.9.7h
0.9.7i
0.9.8c
0.9.8a
0.9.8b
0.9.8
0.9.7g
0.9.7f
0.9.7e
0.9.3a
0.9.7d
0.9.5a
0.9.2b
0.9.1c
0.9.3
0.9.5
0.9.4
1.0.2g
1.0.2f
1.0.2e
1.0.2d
1.0.2c
1.0.2b
1.0.2a
1.0.2
1.0.1t
1.0.1s
1.0.1r
1.0.1q
1.0.1p
1.0.1o
1.0.1n
1.0.1m
1.0.1l
1.0.1k
1.0.1j
1.0.1i
1.0.1h
1.0.1g
1.0.1f
1.0.1e
1.0.1d
1.0.1c
1.0.1b
1.0.1a
1.0.1
0.9.6m
0.9.6j
0.9.6i
0.9.6h
0.9.6g
0.9.6f
0.9.7
0.9.7a
0.9.7b
0.9.7c
0.9.6k
0.9.6l
0.9.6e
0.9.6
0.9.6a
0.9.6b
0.9.6c
0.9.6d
1.0.2h
Vulnerabilities (243)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU134271 - Improper input validation CVE-2026-34182 |
CWE-20 | High | 3.0.21, 3.4.6, 3.5.7, 3.6.3, 4.0.1 | 10.06.2026 |
SB20260610118 SB20260610119 SB20260610122 and 25 more |
||
| #VU134272 - Allocation of Resources Without Limits or Throttling CVE-2026-34183 |
CWE-770 | Medium | 3.4.6, 3.5.7, 3.6.3, 4.0.1 | 10.06.2026 |
SB20260610118 SB20260610119 SB20260610123 and 14 more |
||
| #VU134287 - Improper Verification of Cryptographic Signature CVE-2026-45446 |
CWE-347 | Medium | 3.0.21, 3.4.6, 3.5.7, 3.6.3, 4.0.1 | 10.06.2026 |
SB20260610118 SB20260610119 SB20260610123 and 19 more |
||
| #VU125562 - Unchecked Return Value CVE-2026-31790 |
CWE-252 | Medium | 3.0.20, 3.3.7, 3.4.5, 3.5.6, 3.6.2 | 09.04.2026 |
SB2026040943 SB2026040944 SB2026040945 and 30 more |
||
| #VU125563 - Out-of-bounds read CVE-2026-28386 |
CWE-125 | Low | 3.6.2 | 09.04.2026 |
SB2026040943 |
||
| #VU125564 - Use After Free CVE-2026-28387 |
CWE-416 | High | 1.1.1zg, 3.0.20, 3.3.7, 3.4.5, 3.5.6, 3.6.2 | 09.04.2026 |
SB2026040943 SB2026040944 SB2026040945 and 30 more |
||
| #VU125565 - NULL Pointer Dereference CVE-2026-28388 |
CWE-476 | Low | 1.0.2zp, 1.1.1zg, 3.0.20, 3.3.7, 3.4.5, 3.5.6, 3.6.2 | 09.04.2026 |
SB2026040943 SB2026040944 SB2026040945 and 39 more |
||
| #VU125566 - NULL Pointer Dereference CVE-2026-28389 |
CWE-476 | Medium | 1.0.2zp, 1.1.1zg, 3.0.20, 3.3.7, 3.4.5, 3.5.6, 3.6.2 | 09.04.2026 |
SB2026040943 SB2026040944 SB2026040945 and 32 more |
||
| #VU125567 - NULL Pointer Dereference CVE-2026-28390 |
CWE-476 | Medium | 1.0.2zp, 1.1.1zg, 3.0.20, 3.3.7, 3.4.5, 3.5.6, 3.6.2 | 09.04.2026 |
SB2026040943 SB2026040944 SB2026040992 and 52 more |
||
| #VU125568 - Heap-based Buffer Overflow CVE-2026-31789 |
CWE-122 | Medium | 3.0.20, 3.3.7, 3.4.5, 3.5.6, 3.6.2 | 09.04.2026 |
SB2026040943 SB2026040944 SB2026040945 and 23 more |
||
| #VU125561 - Always-Incorrect Control Flow Implementation CVE-2026-2673 |
CWE-670 | Low | 3.5.6, 3.6.2 | 09.04.2026 |
SB2026040943 SB2026040944 SB20260409112 and 5 more |
||
| #VU122083 - Type confusion CVE-2025-69420 |
CWE-843 | Medium | 1.1.1ze, 3.0.19, 3.3.6, 3.4.4, 3.5.5, 3.6.1 | 27.01.2026 |
SB2026012785 SB2026012791 SB2026012792 and 49 more |
||
| #VU122082 - Out-of-bounds write CVE-2025-69419 |
CWE-787 | Low | 1.1.1ze, 3.0.19, 3.3.6, 3.4.4, 3.5.5, 3.6.1 | 27.01.2026 |
SB2026012785 SB2026012791 SB2026012792 and 69 more |
||
| #VU122081 - Cleartext Transmission of Sensitive Information CVE-2025-69418 |
CWE-319 | Low | 1.1.1ze, 3.0.19, 3.3.6, 3.4.4, 3.5.5, 3.6.1 | 27.01.2026 |
SB2026012785 SB2026012791 SB2026012792 and 47 more |
||
| #VU122080 - Out-of-bounds write CVE-2025-68160 |
CWE-787 | Medium | 1.0.2zn, 1.1.1ze, 3.0.19, 3.3.6, 3.4.4, 3.5.5, 3.6.1 | 27.01.2026 |
SB2026012785 SB2026012791 SB2026012792 and 49 more |
||
| #VU122079 - Resource exhaustion CVE-2025-66199 |
CWE-400 | Medium | 3.3.6, 3.4.4, 3.5.5, 3.6.1 | 27.01.2026 |
SB2026012785 SB2026012791 SB2026012792 and 18 more |
||
| #VU122078 - Numeric Truncation Error CVE-2025-15469 |
CWE-197 | Low | 3.5.5, 3.6.1 | 27.01.2026 |
SB2026012785 SB2026012791 SB2026012792 and 15 more |
||
| #VU122077 - NULL Pointer Dereference CVE-2025-15468 |
CWE-476 | Medium | 3.3.6, 3.4.4, 3.5.5, 3.6.1 | 27.01.2026 |
SB2026012785 SB2026012791 SB2026012792 and 19 more |
||
| #VU122076 - Stack-based buffer overflow CVE-2025-15467 |
CWE-121 | High | 3.0.19, 3.3.6, 3.4.4, 3.5.5, 3.6.1 | 27.01.2026 |
SB2026012785 SB2026012791 SB2026012792 and 67 more |
||
| #VU122075 - Stack-based buffer overflow CVE-2025-11187 |
CWE-121 | Medium | 3.4.4, 3.5.5, 3.6.1 | 27.01.2026 |
SB2026012785 SB2026012791 SB2026012792 and 20 more |
Showing elements 41 - 60 out of 243