OpenSSL Latest Vulnerabilities
Latest vulnerabilities published by openssl
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
Out-of-Bounds Read Vulnerability in OpenSSL HTTP Client API Functions
CVE-2025-9232OpenSSLOpenSSL5.9MEDIUMTiming Side-Channel Vulnerability in SM2 Algorithm on 64-bit ARM Platforms by OpenSSL
CVE-2025-9231OpenSSLOpenSSL6.5MEDIUMOut-of-Bounds Vulnerability in OpenSSL CMS with Password-Based Encryption
CVE-2025-9230OpenSSLOpenSSL7.5HIGHOpenSSL Vulnerability in PowerPC Architecture Exposes Private Key Information
CVE-2025-27587OpenSSLOpenSSL5.3MEDIUMCertificate Misconfiguration Vulnerability in OpenSSL by OpenSSL
CVE-2025-4575OpenSSLOpenSSL6.5MEDIUMMan-in-the-Middle Vulnerability in OpenSSL Affecting Raw Public Key Authentication
CVE-2024-12797OpenSSLOpenSSL👾📰6.3MEDIUMECDSA Timing Side-Channel Vulnerability in OpenSSL Library
CVE-2024-13176OpenSSLOpenSSL4.1MEDIUMIncorrect Buffer Freedom in OpenSSL May Lead to Use After Free Vulnerability
CVE-2024-4741OpenSSL📰Insecure Password Hash Retrieval via Injection into Logical Network
CVE-2024-8933OpenSSLOut-of-Bound Memory Reads or Writes in Low-Level GF(2^m) Elliptic Curve APIs
CVE-2024-9143OpenSSLOpenSSL👾📰4.3MEDIUMMemory Access Issue in OpenSSL Affects Certificate Name Checks
CVE-2024-6119OpenSSLOpenSSLEPSS 15%7.5HIGHBuffer Overread in SSL_select_next_proto May Lead to Loss of Confidentiality
CVE-2024-5535OpenSSLOpenSSL👾🟡9.1CRITICALExcessive delays in checking DSA keys or parameters may lead to Denial of Service attacks
CVE-2024-4603OpenSSLOpenSSLExcessive time spent checking invalid RSA public keys
CVE-2023-6237OpenSSLOpenSSLUnbounded Memory Growth in TLSv1.3 Sessions Due to Non-Default Server Configurations
CVE-2024-2511OpenSSLOpenSSL5.9MEDIUMOpenSSL Crashes Due to Maliciously Formatted PKCS12 Files
CVE-2024-0727OpenSSLOpenSSL5.5MEDIUMPOLY1305 MAC implementation corrupts vector registers on PowerPC
CVE-2023-6129OpenSSLOpenSSL6.5MEDIUMCommand Execution Vulnerability in OpenSSL NPM Package by OpenSSL
CVE-2023-49210Node-OpenSSL ProjectNode-OpenSSL9.8CRITICALExcessive time spent in DH check / generation with large Q parameter value
CVE-2023-5678OpenSSLOpenSSL5.3MEDIUMIncorrect cipher key & IV length processing
CVE-2023-5363OpenSSLOpenSSL7.5HIGHPOLY1305 MAC implementation corrupts XMM registers on Windows
CVE-2023-4807OpenSSLOpenSSL7.8HIGHExcessive time spent checking DH q parameter value
CVE-2023-3817OpenSSLOpenSSL5.3MEDIUMExcessive time spent checking DH keys and parameters
CVE-2023-3446OpenSSLOpenSSL5.3MEDIUMAES-SIV implementation ignores empty associated data entries
CVE-2023-2975OpenSSLOpenSSL5.3MEDIUMPossible DoS translating ASN.1 object identifiers
CVE-2023-2650OpenSSLOpenSSL👾🟡EPSS 91%6.5MEDIUM