vulnwire

All · OpenSSL

Newest first. Every filter here is also a feed: see the subscribe box.

  1. 7.5high
    CVE-2026-84784QUIC: Unbounded RETIRE_CONNECTION_ID Backlog
    OpenSSL
    38 d ago
  2. 7.5high
    CVE-2026-84783Use-After-Free in X.509 Extension Cache Under Concurrent Use
    OpenSSL
    38 d ago
  3. 8.2high
    CVE-2026-84782DTLS Retransmits Handshake Messages From a Stale Buffer Offset
    OpenSSL
    38 d ago
  4. 3.7low
    CVE-2026-77696Timing Side-Channel in SM2 Signature Generation
    OpenSSL
    38 d ago
  5. 5.3med
    CVE-2026-75806Unauthenticated and Undersized DTLS 1.2 AEAD Record Causes DoS
    OpenSSL
    38 d ago
  6. 5.3med
    CVE-2026-75805NULL Pointer Dereference in CMP Client Revocation Response Handling
    OpenSSL
    38 d ago
  7. 5.3med
    CVE-2026-75804QUIC Connection-Level Flow Control is Not Enforced for Streams
    OpenSSL
    38 d ago
  8. 7.5high
    CVE-2026-72897Out-of-Bounds Access After SSL_set_SSL_CTX() During a Handshake
    OpenSSL
    38 d ago
  9. 3.7low
    CVE-2026-54875Non-Constant-Time SM2 Scalar Multiplication on ARM64 and RISC-V
    OpenSSL
    38 d ago
  10. 7.5high
    CVE-2026-54873QUIC STREAM Fragment Metadata DoS
    OpenSSL
    38 d ago
  11. 3.7low
    CVE-2026-54872Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves
    OpenSSL
    38 d ago
  12. 5.3med
    CVE-2026-42772Potential CPU DoS via O(n^2) Fragment Reassembly in QUIC
    OpenSSL
    38 d ago
  13. 3.7low
    CVE-2026-35191QUIC Unvalidated Amplification Credit may be Over Accounted
    OpenSSL
    38 d ago
  14. 5.3med
    CVE-2026-35189Excessive Memory Allocation in Relative CRLDP Processing
    OpenSSL
    38 d ago
  15. 9.1crit
    CVE-2026-75803AEAD Forgeries with Empty Ciphertext When Using EVP_Cipher()
    OpenSSL
    2 mo ago
  16. 7.5high
    CVE-2026-63076Invalid Pointer Dereference in CMP Server via Crafted protectionAlg
    OpenSSL
    2 mo ago
  17. 7.5high
    CVE-2026-63075QUIC ACK-only Packet Retention Can Cause Memory Exhaustion
    OpenSSL
    2 mo ago
  18. 5.9med
    CVE-2026-63074CMP Indefinite Cache Growth of ExtraCerts
    OpenSSL
    2 mo ago
  19. 9.8crit
    CVE-2026-63073Untrusted Sender DN Used as Format String in CMP Response Validation
    OpenSSL
    2 mo ago
  20. 7.5high
    CVE-2026-63072Heap Buffer Overflow in CMS Key Unwrapping
    OpenSSL
    2 mo ago
  21. 7.5high
    CVE-2026-54874Excessive Memory Use Buffering DTLS Records for a Future Epoch
    OpenSSL
    2 mo ago
  22. 7.5high
    CVE-2026-18798QUIC Server May Trigger Double Free When Processing INITIAL Packet
    OpenSSL
    2 mo ago
  23. 7.5high
    CVE-2026-14457RPK Server Signature Algorithm Selection Can Dereference a Missing Certificate
    OpenSSL
    2 mo ago
  24. 7.5high
    CVE-2026-14456Unbounded Memory Growth in QUIC Server Incoming Channel Queue
    OpenSSL
    2 mo ago
  25. 7.5high
    CVE-2026-54876Client-Side Memory Leak in OCSP Response Checking
    OpenSSL
    3 mo ago
  26. 8.8high
    CVE-2026-45447Heap Use-After-Free in the PKCS7_verify() Function
    OpenSSL
    4 mo ago
  27. 4.8med
    CVE-2026-45446Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes
    OpenSSL
    4 mo ago
  28. 7.5high
    CVE-2026-45445AES-OCB IV Ignored on EVP_Cipher() Path
    OpenSSL
    4 mo ago
  29. 6.2med
    CVE-2026-42771Possible Out of Bounds Read in X509_VERIFY_PARAM_set1_email()
    OpenSSL
    4 mo ago
  30. 3.7low
    CVE-2026-42770FFC-DH Peer Validation Uses Attacker-Supplied q
    OpenSSL
    4 mo ago