Known vulnerabilities in OpenVPN for Windows

Vendor: OpenVPN
Software CPE: cpe:2.3:a:openvpn_net:openvpn:*:*:*:*:*:*:*:*
Total vulnerabilities: 23
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting OpenVPN for Windows OpenVPN for Windows is affected by 23 known vulnerabilities: 2 high, 8 medium, 13 low Critical High Medium Low

Vulnerabilities (23)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU92938 - Resource Management Errors
CVE-2024-28882
CWE-399 Low
No
No
2.6.11 20.06.2024 SB20240620213
SB2024062132
SB2024070301
and 5 more
#VU92937 - Resource exhaustion
CVE-2024-5594
CWE-400 Low
No
No
2.6.11 20.06.2024 SB20240620213
SB2024062132
SB2024070301
and 8 more
#VU92936 - Permissions, Privileges, and Access Controls
CVE-2024-4877
CWE-264 Low
No
No
2.6.11 20.06.2024 SB20240620213
SB2025031417
#VU87678 - Integer overflow
CVE-2024-1305
CWE-190 Low
No
No
2.5.10, 2.6.10 20.03.2024 SB2024032065
SB2025031417
#VU87677 - Untrusted Search Path
CVE-2024-27903
CWE-426 Low
No
No
2.5.10, 2.6.10 20.03.2024 SB2024032065
SB2025031417
#VU87676 - Improper Access Control
CVE-2024-24974
CWE-284 Medium
No
No
2.5.10, 2.6.10 20.03.2024 SB2024032065
SB2025031417
#VU87675 - Stack-based buffer overflow
CVE-2024-27459
CWE-121 Low
No
No
2.5.10, 2.6.10 20.03.2024 SB2024032065
SB2025031417
#VU86536 - Incorrect Default Permissions
CVE-2023-7235
CWE-276 Low
No
No
2.6.9 15.02.2024 SB2024021515
#VU82952 - Divide By Zero
CVE-2023-46849
CWE-369 Medium
No
No
2.6.7 10.11.2023 SB2023111004
SB2023111005
SB2023111006
and 6 more
#VU82951 - Use After Free
CVE-2023-46850
CWE-416 Low
No
No
2.6.7 10.11.2023 SB2023111004
SB2023111005
SB2023111006
and 6 more
#VU61608 - Improper Authentication
CVE-2022-0547
CWE-287 Medium
No
No
2.4.12, 2.5.6 24.03.2022 SB2022032420
SB2022032423
SB2022040412
and 17 more
#VU52479 - Improper Authentication
CVE-2020-15078
CWE-287 Medium
No
No
2.4.11, 2.5.2 21.04.2021 SB2021042156
SB2021052621
SB2021090828
and 11 more
#VU27616 - Resource Management Errors
CVE-2020-11810
CWE-399 Low
No
No
2.4.9 10.05.2020 SB2020051001
SB2020073009
SB2020041802
and 11 more
#VU12129 - Double Free
CVE-2018-9336
CWE-415 Low
No
No
- 24.04.2018 SB2018042412
SB2018042704
SB2018070903
and 1 more
#VU8637 - Memory corruption
CVE-2017-12166
CWE-119 High
No
No
- 29.09.2017 SB2017092902
SB2017092904
SB2017110308
and 11 more
#VU7165 - Exposure of sensitive information to an unauthorized actor
CVE-2017-7520
CWE-200 Low
No
No
- 22.06.2017 SB2017062107
SB2017062204
SB2017062212
and 13 more
#VU7144 - Reachable Assertion
CVE-2017-7508
CWE-617 Medium
No
No
- 21.06.2017 SB2017062107
SB2017062204
SB2017062212
and 13 more
#VU7143 - Double Free
CVE-2017-7521
CWE-415 High
No
No
- 21.06.2017 SB2017062107
SB2017062204
SB2017062212
and 12 more
#VU7142 - Missing release of memory after effective lifetime
CVE-2017-7512
CWE-401 Medium
No
No
- 21.06.2017 SB2017062107
SB2017062204
SB2017062212
and 2 more
#VU7141 - Improper input validation
CVE-2017-7522
CWE-20 Low
No
No
- 21.06.2017 SB2017062107
SB2017062204
SB2017062813
and 5 more


Showing elements 1 - 20 out of 23