OP
Product
OpenSSL
On CISA KEVExploited in the wild
322
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 17High 88Medium 78Low 13
Watch
Add OpenSSL to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-75804 | 5.3 | Sep 29 | QUIC Connection-Level Flow Control is Not Enforced for Streams Affected: 4.0.0 before 4.0.3; 3.6.0 before 3.6.5; 3.5.0 before 3.5.9; 3.4.0 before 3.4.8 |
| CVE-2026-42772 | 5.3 | Sep 29 | Potential CPU DoS via O(n^2) Fragment Reassembly in QUIC Affected: 4.0.0 before 4.0.3; 3.6.0 before 3.6.5; 3.5.0 before 3.5.9; 3.4.0 before 3.4.8 |
| CVE-2026-35189 | 5.3 | Sep 29 | Excessive Memory Allocation in Relative CRLDP Processing Affected: 4.0.0 before 4.0.3; 3.6.0 before 3.6.5; 3.5.0 before 3.5.9; 3.4.0 before 3.4.8; 3.0.0 before 3.0.23; 1.1.1 before 1.1.1zj; +1 more |
| CVE-2026-42769 | 5.3 | Jun 9 | Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate Affected: 4.0.0 before 4.0.1; 3.6.0 before 3.6.3; 3.5.0 before 3.5.7; 3.4.0 before 3.4.6 |
| CVE-2026-22796 | 5.3 | Jan 27 | ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function Affected: 3.6.0 before 3.6.1; 3.5.0 before 3.5.5; 3.4.0 before 3.4.4; 3.3.0 before 3.3.6; 3.0.0 before 3.0.19; 1.1.1 before 1.1.1ze; +1 more |
| CVE-2024-4603 | 5.3 | May 16 | Excessive time spent checking DSA keys and parameters Affected: 3.0.0 before 3.0.14; 3.1.0 before 3.1.6; 3.2.0 before 3.2.2; 3.3.0 before 3.3.1 |
| CVE-2023-5678 | 5.3 | Nov 6 | Excessive time spent in DH check / generation with large Q parameter value Affected: 1.0.2 before 1.0.2zj; 1.1.1 before 1.1.1x; 3.0.0 before 3.0.13; 3.1.0 before 3.1.5 |
| CVE-2023-3817 | 5.3 | Jul 31 | Excessive time spent checking DH q parameter value Affected: 3.1.0 before 3.1.2; 3.0.0 before 3.0.10; 1.1.1 before 1.1.1v; 1.0.2 before 1.0.2zi |
| CVE-2023-3446 | 5.3 | Jul 19 | Excessive time spent checking DH keys and parameters Affected: 3.1.0 before 3.1.2; 3.0.0 before 3.0.10; 1.1.1 before 1.1.1v; 1.0.2 before 1.0.2zi |
| CVE-2023-2975 | 5.3 | Jul 14 | AES-SIV implementation ignores empty associated data entries Affected: 3.1.0 before 3.1.2; 3.0.0 before 3.0.10 |
| CVE-2023-0466 | 5.3 | Mar 28 | Certificate policy check not enabled Affected: 3.1.0 before 3.1.1; 3.0.0 before 3.0.9; 1.1.1 before 1.1.1u; 1.0.2 before 1.0.2zh |
| CVE-2023-0465 | 5.3 | Mar 28 | Invalid certificate policies in leaf certificates are silently ignored Affected: 3.1.0 before 3.1.1; 3.0.0 before 3.0.9; 1.1.1 before 1.1.1u; 1.0.2 before 1.0.2zh |
| CVE-2022-2097 | 5.3 | Jul 5 | AES OCB fails to encrypt some bytes Affected: Fixed in OpenSSL 3.0.5 (Affected 3.0.0-3.0.4); Fixed in OpenSSL 1.1.1q (Affected 1.1.1-1.1.1p) |
| CVE-2022-1343 | 5.3 | May 3 | OCSP_basic_verify may incorrectly verify the response signing certificate Affected: Fixed in OpenSSL 3.0.3 (Affected 3.0.0,3.0.1,3.0.2) |
| CVE-2019-1551 | 5.3 | Dec 6 | rsaz_512_sqr overflow bug on x86_64 Affected: Fixed in OpenSSL 1.1.1e (Affected 1.1.1-1.1.1d); Fixed in OpenSSL 1.0.2u (Affected 1.0.2-1.0.2t) |
| CVE-2019-1549 | 5.3 | Sep 10 | OpenSSL 1.1.1 introduced a rewritten random number generator (RNG) Affected: 1.1.1 through 1.1.1c |
| CVE-2017-3735 | 5.3 | Aug 28 | While parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one-byte overread Affected: 0.9.7j; 0.9.7k; 0.9.7l; 0.9.7m; 0.9.8; 0.9.8a; +34 more |
| CVE-2015-3195 | 5.3 | Dec 6 | The ASN1_TFLG_COMBINE implementation in crypto/asn1/tasn_dec.c in OpenSSL before 0.9.8zh, 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1q, and 1.0.2 before 1.0.2e mishandles errors… Affected: before 0.9.8zh; 1.0.0 before 1.0.0t; 1.0.1 before 1.0.1q; 1.0.2 before 1.0.2e |
| CVE-2016-0702 | 5.1 | Mar 3 | The MOD_EXP_CTIME_COPY_FROM_PREBUF function in crypto/bn/bn_exp.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g does not properly consider cache-bank access times during… Affected: 1.0.1; 1.0.1; 1.0.1; 1.0.1; 1.0.1a; 1.0.1b; +26 more |
| CVE-2026-35188 | 5.0 | Jun 9 | Double-free When Checking OCSP Stapled Response Affected: 4.0.0 before 4.0.1; 3.6.0 before 3.6.3 |
| CVE-2022-4203 | 4.9 | Feb 24 | X.509 Name Constraints Read Buffer Overflow Affected: 3.0.0 before 3.0.8 |
| CVE-2026-45446 | 4.8 | Jun 9 | Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes Affected: 4.0.0 before 4.0.1; 3.6.0 before 3.6.3; 3.5.0 before 3.5.7; 3.4.0 before 3.4.6; 3.0.0 before 3.0.21 |
| CVE-2025-68160 | 4.7 | Jan 27 | Heap out-of-bounds write in BIO_f_linebuffer on short writes Affected: 3.6.0 before 3.6.1; 3.5.0 before 3.5.5; 3.4.0 before 3.4.4; 3.3.0 before 3.3.6; 3.0.0 before 3.0.19; 1.1.1 before 1.1.1ze; +1 more |
| CVE-2019-1547 | 4.7 | Sep 10 | Normally in OpenSSL EC groups always have a co-factor present and this is used in side channel resistant code paths Affected: 1.0.2 through 1.0.2s; 1.1.0 through 1.1.0k; 1.1.1 through 1.1.1c |
| CVE-2018-5407 | 4.7 | Nov 15 | Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software vulnerable to timing attacks via a side-channel timing attack on 'port contention' Affected: 1.0.2 before 1.0.2q; 1.1.0 before 1.1.0i |
| CVE-2024-9143 | 4.3 | Oct 16 | Low-level invalid GF(2^m) parameters lead to OOB memory access Affected: 3.3.0 before 3.3.3; 3.2.0 before 3.2.4; 3.1.0 before 3.1.8; 3.0.0 before 3.0.16; 1.1.1 before 1.1.1zb; 1.0.2 before 1.0.2zl |
| CVE-2024-13176 | 4.1 | Jan 20 | Timing side-channel in ECDSA signature computation Affected: 3.4.0 before 3.4.1; 3.3.0 before 3.3.3; 3.2.0 before 3.2.4; 3.1.0 before 3.1.8; 3.0.0 before 3.0.16; 1.1.1 before 1.1.1zb; +1 more |
| CVE-2025-69418 | 4.0 | Jan 27 | Unauthenticated/unencrypted trailing bytes with low-level OCB function calls Affected: 3.6.0 before 3.6.1; 3.5.0 before 3.5.5; 3.4.0 before 3.4.4; 3.3.0 before 3.3.6; 3.0.0 before 3.0.19; 1.1.1 before 1.1.1ze |