- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
openssl command-line program, the libcrypto cryptographic library, and the libssl library for SSL/TLS communications, supporting developers and organizations that build secure networked applications and manage certificates and keys.As of 11/04/2026, OpenSSL recorded 24 security vulnerabilities in the last 90 days across 1 products, including 14 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, OpenSSL had the most security vulnerabilities in the OpenSSL ecosystem, with 24 vulnerabilities—approximately 100% of the provider's total vulnerabilities during this period.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-2673OpenSSL TLS 1.3 server may choose unexpected key agreement groupCVE-2026-22796ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() functionCVE-2026-22795Missing ASN1_TYPE validation in PKCS#12 parsingCVE-2025-69421NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex functionCVE-2025-69420Missing ASN1_TYPE validation in TS_RESP_verify_response() function| Vulnerability | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2026-2673OpenSSL TLS 1.3 server may choose unexpected key agreement group | Exploitation statusNot exploited | FixYes |
| Published03/13/2026 |
| SeverityMedium |
CVE-2026-22796ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function | Exploitation statusNot exploited | FixYes | Affected productOpenSSL | Published01/27/2026 | SeverityMedium |
|---|
CVE-2026-22795Missing ASN1_TYPE validation in PKCS#12 parsing | Exploitation statusNot exploited | FixYes | Affected productOpenSSL | Published01/27/2026 | SeverityMedium |
|---|
CVE-2025-69421NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function | Exploitation statusNot exploited | FixYes | Affected productOpenSSL | Published01/27/2026 | SeverityHigh |
|---|
CVE-2025-69420Missing ASN1_TYPE validation in TS_RESP_verify_response() function | Exploitation statusNot exploited | FixYes | Affected productOpenSSL | Published01/27/2026 | SeverityHigh |
|---|
CVE-2025-69419Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion | Exploitation statusNot exploited | FixYes | Affected productOpenSSL | Published01/27/2026 | SeverityHigh |
|---|
CVE-2025-69418Unauthenticated/unencrypted trailing bytes with low-level OCB function calls | Exploitation statusNot exploited | FixYes | Affected productOpenSSL | Published01/27/2026 | SeverityMedium |
|---|
CVE-2025-68160Heap out-of-bounds write in BIO_f_linebuffer on short writes | Exploitation statusNot exploited | FixYes | Affected productOpenSSL | Published01/27/2026 | SeverityMedium |
|---|
CVE-2025-66199TLS 1.3 CompressedCertificate excessive memory allocation | Exploitation statusNot exploited | FixYes | Affected productOpenSSL | Published01/27/2026 | SeverityMedium |
|---|
CVE-2025-15469'openssl dgst' one-shot codepath silently truncates inputs >16MB | Exploitation statusNot exploited | FixYes | Affected productOpenSSL | Published01/27/2026 | SeverityMedium |
|---|
CVE-2025-15468NULL dereference in SSL_CIPHER_find() function on unknown cipher ID | Exploitation statusNot exploited | FixYes | Affected productOpenSSL | Published01/27/2026 | SeverityMedium |
|---|
CVE-2025-15467OpenSSL CMS Parsing Stack Buffer Overflow Can Cause Denial of Service or Remote Code Execution | Exploitation statusActively exploited | FixYes | Affected productOpenSSL | Published01/27/2026 | SeverityCritical |
|---|
CVE-2025-11187Improper validation of PBMAC1 parameters in PKCS#12 MAC verification | Exploitation statusActively exploited | FixYes | Affected productOpenSSL | Published01/27/2026 | SeverityMedium |
|---|
CVE-2025-9232Out-of-bounds read in HTTP client no_proxy handling | Exploitation statusNot exploited | FixYes | Affected productOpenSSL | Published09/30/2025 | SeverityMedium |
|---|
CVE-2025-9231Timing side-channel in SM2 algorithm on 64 bit ARM | Exploitation statusNot exploited | FixYes | Affected productOpenSSL | Published09/30/2025 | SeverityMedium |
|---|
CVE-2025-9230Out-of-bounds read & write in RFC 3211 KEK Unwrap | Exploitation statusNot exploited | FixYes | Affected productOpenSSL | Published09/30/2025 | SeverityHigh |
|---|
CVE-2025-4575The x509 application adds trusted use instead of rejected use | Exploitation statusNot exploited | FixYes | Affected productOpenSSL | Published05/22/2025 | SeverityMedium |
|---|
CVE-2024-12797RFC7250 handshakes with unauthenticated servers don't abort as expected | Exploitation statusNot exploited | FixYes | Affected productOpenSSL | Published02/11/2025 | SeverityMedium |
|---|
CVE-2024-13176Timing side-channel in ECDSA signature computation | Exploitation statusNot exploited | FixYes | Affected productOpenSSL | Published01/20/2025 | SeverityMedium |
|---|
CVE-2024-4741Use After Free with SSL_free_buffers | Exploitation statusNot exploited | FixYes | Affected productOpenSSL | Published11/13/2024 | SeverityHigh |
|---|
CVE-2024-9143Low-level invalid GF(2^m) parameters lead to OOB memory access | Exploitation statusNot exploited | FixYes | Affected productOpenSSL | Published10/16/2024 | SeverityMedium |
|---|
CVE-2024-6119Possible denial of service in X.509 name checks | Exploitation statusNot exploited | FixYes | Affected productOpenSSL | Published09/03/2024 | SeverityHigh |
|---|
CVE-2024-5535SSL_select_next_proto buffer overread | Exploitation statusNot exploited | FixYes | Affected productOpenSSL | Published06/27/2024 | SeverityCritical |
|---|
CVE-2024-4603Excessive time spent checking DSA keys and parameters | Exploitation statusNot exploited | FixYes | Affected productOpenSSL | Published05/16/2024 | SeverityMedium |
|---|
CVE-2023-6237Excessive time spent checking invalid RSA public keys | Exploitation statusNot exploited | FixYes | Affected productOpenSSL | Published04/25/2024 | SeverityMedium |
|---|
CVE-2024-2511Unbounded memory growth with session handling in TLSv1.3 | Exploitation statusNot exploited | FixYes | Affected productOpenSSL | Published04/08/2024 | SeverityMedium |
|---|
CVE-2024-0727PKCS12 Decoding crashes | Exploitation statusNot exploited | FixYes | Affected productOpenSSL | Published01/26/2024 | SeverityMedium |
|---|
CVE-2023-6129POLY1305 MAC implementation corrupts vector registers on PowerPC | Exploitation statusNot exploited | FixYes | Affected productOpenSSL | Published01/09/2024 | SeverityMedium |
|---|
CVE-2023-5678Excessive time spent in DH check / generation with large Q parameter value | Exploitation statusNot exploited | FixYes | Affected productOpenSSL | Published11/06/2023 | SeverityMedium |
|---|
CVE-2023-5363Incorrect cipher key & IV length processing | Exploitation statusNot exploited | FixYes | Affected productOpenSSL | Published10/24/2023 | SeverityHigh |
|---|
CVE-2023-4807POLY1305 MAC implementation corrupts XMM registers on Windows | Exploitation statusNot exploited | FixYes | Affected productOpenSSL | Published09/08/2023 | SeverityHigh |
|---|
CVE-2023-3817Excessive time spent checking DH q parameter value | Exploitation statusNot exploited | FixYes | Affected productOpenSSL | Published07/31/2023 | SeverityMedium |
|---|
CVE-2023-3446Excessive time spent checking DH keys and parameters | Exploitation statusNot exploited | FixYes | Affected productOpenSSL | Published07/19/2023 | SeverityMedium |
|---|
CVE-2023-2975AES-SIV implementation ignores empty associated data entries | Exploitation statusNot exploited | FixYes | Affected productOpenSSL | Published07/14/2023 | SeverityMedium |
|---|
CVE-2023-2650Possible DoS translating ASN.1 object identifiers | Exploitation statusNot exploited | FixYes | Affected productOpenSSL | Published05/30/2023 | SeverityMedium |
|---|
CVE-2023-1255Input buffer over-read in AES-XTS implementation on 64 bit ARM | Exploitation statusNot exploited | FixYes | Affected productOpenSSL | Published04/20/2023 | SeverityMedium |
|---|
CVE-2023-0466Certificate policy check not enabled | Exploitation statusNot exploited | FixYes | Affected productOpenSSL | Published03/28/2023 | SeverityMedium |
|---|
CVE-2023-0465Invalid certificate policies in leaf certificates are silently ignored | Exploitation statusNot exploited | FixYes | Affected productOpenSSL | Published03/28/2023 | SeverityMedium |
|---|
CVE-2023-0464Excessive Resource Usage Verifying X.509 Policy Constraints | Exploitation statusNot exploited | FixYes | Affected productOpenSSL | Published03/22/2023 | SeverityHigh |
|---|
CVE-2022-4203X.509 Name Constraints Read Buffer Overflow | Exploitation statusNot exploited | FixYes | Affected productOpenSSL | Published02/24/2023 | SeverityMedium |
|---|
CVE-2023-0401NULL dereference during PKCS7 data verification | Exploitation statusNot exploited | FixYes | Affected productOpenSSL | Published02/08/2023 | SeverityHigh |
|---|
CVE-2023-0286OpenSSL X.400 address type confusion in X.509 GeneralName can expose memory or cause denial of service | Exploitation statusNot exploited | FixYes | Affected productOpenSSL | Published02/08/2023 | SeverityHigh |
|---|
CVE-2023-0217NULL dereference validating DSA public key | Exploitation statusNot exploited | FixYes | Affected productOpenSSL | Published02/08/2023 | SeverityHigh |
|---|
CVE-2023-0216Invalid pointer dereference in d2i_PKCS7 functions | Exploitation statusNot exploited | FixYes | Affected productOpenSSL | Published02/08/2023 | SeverityHigh |
|---|
CVE-2023-0215Use-after-free following BIO_new_NDEF | Exploitation statusNot exploited | FixYes | Affected productOpenSSL | Published02/08/2023 | SeverityHigh |
|---|
CVE-2022-4450Double free after calling PEM_read_bio_ex | Exploitation statusNot exploited | FixYes | Affected productOpenSSL | Published02/08/2023 | SeverityHigh |
|---|
CVE-2022-4304Timing Oracle in RSA Decryption | Exploitation statusNot exploited | FixYes | Affected productOpenSSL | Published02/08/2023 | SeverityMedium |
|---|
CVE-2022-3996X.509 Policy Constraints Double Locking | Exploitation statusNot exploited | FixYes | Affected productOpenSSL | Published12/13/2022 | SeverityHigh |
|---|
CVE-2022-3786X.509 Email Address Variable Length Buffer Overflow | Exploitation statusNot exploited | FixYes | Affected productOpenSSL | Published11/01/2022 | SeverityHigh |
|---|
CVE-2022-3602X.509 Email Address 4-byte Buffer Overflow | Exploitation statusNot exploited | FixYes | Affected productOpenSSL | Published11/01/2022 | SeverityHigh |
|---|
142 Results | Page 2 of 3