Skip to content
Fencer Intel

All · OpenSSL

Newest first, late arrivals on top. Also a feed.

  1. 5.3
    CVE-2026-42769 Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate
    OpenSSLjulia
  2. 3.7
    CVE-2026-42768 Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt()
    OpenSSLjulia
  3. 5.9
    CVE-2026-42767 NULL Pointer Dereference in CRMF EncryptedValue Decryption
    OpenSSLjulia
  4. 5.9
    CVE-2026-42766 Possible NULL Dereference in Password-Based CMS Decryption
    OpenSSLjulia
    EPSS 1.1% chance of exploitation in 30 days, percentile 65%
  5. 7.5
    CVE-2026-42765 NULL Dereference in Certificate Verification with OCSP Checking
    OpenSSL
  6. 7.5
    CVE-2026-42764 NULL Pointer Dereference in QUIC Server Initial Packet Handling
    OpenSSLjulia
    EPSS 1.2% chance of exploitation in 30 days, percentile 67%
  7. 5.0
    CVE-2026-35188 Double-free When Checking OCSP Stapled Response
    OpenSSL
  8. 7.5
    CVE-2026-34183 Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler
    OpenSSLjulia
    EPSS 1.0% chance of exploitation in 30 days, percentile 64%
  9. 9.1
    CVE-2026-34182 CMS AuthEnvelopedData Processing May Accept Forged Messages
    OpenSSLjulia
    EPSS 1.1% chance of exploitation in 30 days, percentile 64%
  10. 7.4
    CVE-2026-34181 PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys
    OpenSSLjulia
  11. 7.5
    CVE-2026-34180 Heap Buffer Over-read in ASN.1 Content Parsing
    OpenSSLjulia
    EPSS 1.0% chance of exploitation in 30 days, percentile 64%
  12. 7.5
    CVE-2026-9076 Out-of-Bounds Read in CMS Password-Based Decryption
    OpenSSLjulia
  13. 8.1
    CVE-2026-7383 Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion
    OpenSSLjulia
  14. 7.5
    CVE-2026-31790 Incorrect Failure Handling in RSA KEM RSASVE Encapsulation
    OpenSSLjulia
    EPSS 1.0% chance of exploitation in 30 days, percentile 64%
  15. 5.8
    CVE-2026-31789 Heap Buffer Overflow in Hexadecimal Conversion
    OpenSSLjulia
  16. 7.5
    CVE-2026-28390 Possible NULL Dereference When Processing CMS KeyTransportRecipientInfo
    OpenSSLjulia
  17. 7.5
    CVE-2026-28389 Possible NULL Dereference When Processing CMS KeyAgreeRecipientInfo
    OpenSSLjulia
  18. 7.5
    CVE-2026-28388 NULL Pointer Dereference When Processing a Delta CRL
    OpenSSLjulia
  19. 8.1
    CVE-2026-28387 Potential Use-after-free in DANE Client Code
    OpenSSLjulia
  20. 9.1
    CVE-2026-28386 Out-of-bounds Read in AES-CFB-128 on X86-64 with AVX-512 Support
    OpenSSL
  21. 6.5
    CVE-2026-2673 OpenSSL TLS 1.3 server may choose unexpected key agreement group
    OpenSSLjulia
  22. 5.3
    CVE-2026-22796 ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function
    OpenSSLjulia
  23. 5.5
    CVE-2026-22795 Missing ASN1_TYPE validation in PKCS#12 parsing
    OpenSSLjulia
  24. 7.5
    CVE-2025-69421 NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function
    OpenSSLjulia
  25. 7.5
    CVE-2025-69420 Missing ASN1_TYPE validation in TS_RESP_verify_response() function
    OpenSSLjulia
  26. 7.4
    CVE-2025-69419 Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion
    OpenSSLjulia
  27. 4.0
    CVE-2025-69418 Unauthenticated/unencrypted trailing bytes with low-level OCB function calls
    OpenSSLjulia
  28. 4.7
    CVE-2025-68160 Heap out-of-bounds write in BIO_f_linebuffer on short writes
    OpenSSLjulia
  29. 5.9
    CVE-2025-66199 TLS 1.3 CompressedCertificate excessive memory allocation
    OpenSSLjulia
  30. 5.5
    CVE-2025-15469 'openssl dgst' one-shot codepath silently truncates inputs >16MB
    OpenSSLjulia