OpenSSL vulnerabilities

Latest OpenSSL CVEs

Newest publication first · page 9 of 33

1. CVE-2026-21444 libtpms returns wrong initialization vector when certain symmetric ciphers are used

   Published 2026-01-02

   Medium·CVSS 5.5 EPSS 0.08%

   libtpms, a library that provides software emulation of a Trusted Platform Module, has a flaw in versions 0.10.0 and 0.10.1. The commonly used integration of libtpms with OpenSSL 3.x contained a vulnerability related to the returned IV (initialization vector) when certain symmetri...

2. CVE-2025-69217 Coturn has unsafe nonce and relay port randomization due to weak random number generation.

   Published 2025-12-30

   High·CVSS 7.7 EPSS 0.41%

   coturn is a free open source implementation of TURN and STUN Server. Versions 4.6.2r5 through 4.7.0-r4 have a bad random number generator for nonces and port randomization after refactoring. Additionally, random numbers aren't generated with openssl's RAND_bytes but libc's random...

3. CVE-2025-14406 Soda PDF Desktop Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

   Published 2025-12-23

   High·CVSS 7.8 EPSS 0.16%

   Soda PDF Desktop Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Soda PDF Desktop. An attacker must first obtain the ability to execute low-privileged code on...

4. CVE-2025-14405 PDFsam Enhanced Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

   Published 2025-12-23

   Medium·CVSS 6.8 EPSS 0.33%

   PDFsam Enhanced Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows phyiscally-present attackers to escalate privileges on affected installations of PDFsam Enhanced. An attacker must first obtain the ability to mount a malicious dr...

5. CVE-2025-53841 The GC-AGENTS-SERVICE running as part of Akamai´s Guardicore Platform Agent for Windows versions prior to v49.20.1, v50.15.0, v51.12.0, v52.2.0 is affected by a local privilege escalation vulnerabilit...

   Published 2025-12-03

   High·CVSS 7.8 EPSS 0.16%

   The GC-AGENTS-SERVICE running as part of Akamai´s Guardicore Platform Agent for Windows versions prior to v49.20.1, v50.15.0, v51.12.0, v52.2.0 is affected by a local privilege escalation vulnerability. The service will attempt to read an OpenSSL configuration file from a non-exi...

6. CVE-2025-64429 DuckDB Encryption Crypto implementation is vulnerable

   Published 2025-11-12

   Medium·CVSS 6.9 EPSS 0.12%

   DuckDB is a SQL database management system. DuckDB implemented block-based encryption of DB on the filesystem starting with DuckDB 1.4.0. There are a few issues related to this implementation. The DuckDB can fall back to an insecure random number generator (pcg32) to generate cry...

7. MAL-2025-191617 Malicious code in aiohttp-openssl (PyPI)

   Published 2025-10-24

   Unknown

   -= Per source details. Do not edit below this line.=- Source: kam193 (67b219a81e6b2dd7db78b4b223da914ee7baefd0ab056940d3af0bc3b47846a0) Packages silently decrypt content hidden in a dependency and load them as Python extension modules. In the first wave, those are copies of legit...

8. CVE-2025-41721 Sauter: Command Injection

   Published 2025-10-22

   Low·CVSS 2.7 EPSS 0.20%

   A high privileged remote attacker can influence the parameters passed to the openssl command due to improper neutralization of special elements when adding a password protected self-signed certificate.

9. CVE-2025-62375 go-witness Improper Verification of AWS EC2 Identity Documents

   Published 2025-10-15

   Medium·CVSS 6.9 EPSS 0.20%

   go-witness and witness are Go modules for generating attestations. In go-witness versions 0.8.6 and earlier and witness versions 0.9.2 and earlier the AWS attestor improperly verifies AWS EC2 instance identity documents. Verification can incorrectly succeed when a signature is no...

10. CVE-2025-27237 DLL injection in Zabbix Agent and Agent 2 via OpenSSL configuration

    Published 2025-10-03

    High·CVSS 7.3 EPSS 0.33%

    In Zabbix Agent and Agent 2 on Windows, the OpenSSL configuration file is loaded from a path writable by low-privileged users, allowing malicious modification and potential local privilege escalation by injecting a DLL.

11. DLA-4321-1 openssl - security update

    Published 2025-10-03

    Unknown

12. DSA-6015-1 openssl - security update

    Published 2025-10-01

    Unknown

13. CVE-2025-9232 Out-of-bounds read in HTTP client no_proxy handling

    Published 2025-09-30

    Medium·CVSS 5.9 EPSS 2.4%

    Issue summary: An application using the OpenSSL HTTP client API functions may trigger an out-of-bounds read if the 'no_proxy' environment variable is set and the host portion of the authority component of the HTTP URL is an IPv6 address. Impact summary: An out-of-bounds read can...

14. CVE-2025-9231 Timing side-channel in SM2 algorithm on 64 bit ARM

    Published 2025-09-30

    Medium·CVSS 5.9 EPSS 1.6%

    Issue summary: A timing side-channel which could potentially allow remote recovery of the private key exists in the SM2 algorithm implementation on 64 bit ARM platforms. Impact summary: A timing side-channel in SM2 signature computations on 64 bit ARM platforms could allow recove...

15. CVE-2025-9230 Out-of-bounds read & write in RFC 3211 KEK Unwrap

    Published 2025-09-30

    Critical·CVSS 9.8 EPSS 1.8%

    Issue summary: An application trying to decrypt CMS messages encrypted using password based encryption can trigger an out-of-bounds read and write. Impact summary: This out-of-bounds read may trigger a crash which leads to Denial of Service for an application. The out-of-bounds w...

16. CVE-2025-60019 Glib-networking: uninitialized memory dereferences on glib-networking through glib-networking/tls/openssl/gtlsbio.c via g_tls_bio_new_from_iostream() and g_tls_bio_new_from_datagram_based()

    Published 2025-09-25

    Low·CVSS 3.7 EPSS 0.36%

    glib-networking's OpenSSL backend fails to properly check the return value of memory allocation routines. An out of memory condition could potentially result in writing to an invalid memory location.

17. CVE-2025-60018 Glib-networking: out of bound reads on glib-networking through tls/openssl/gtlscertificate-openssl.c via "g_tls_certificate_openssl_get_property()"

    Published 2025-09-25

    Medium·CVSS 4.8 EPSS 0.31%

    glib-networking's OpenSSL backend fails to properly check the return value of a call to BIO_write(), resulting in an out of bounds read.

18. CVE-2025-34192 Vasion Print (formerly PrinterLogic) Usage of Outdated and Unsupported OpenSSL Version

    Published 2025-09-19

    Critical·CVSS 9.3 EPSS 0.96%

    Vasion Print (formerly PrinterLogic) Virtual Appliance Host versions prior to 22.0.893 and Application versions prior to 20.0.2140 (macOS/Linux client deployments) are built against OpenSSL 1.0.2h-fips (released May 2016), which has been end-of-life since 2019 and is no longer su...

19. CVE-2025-34203 Vasion Print (formerly PrinterLogic) Use of Outdated, End-Of-Life, and Vulnerable Third-Party Components

    Published 2025-09-19

    Critical·CVSS 9.3 EPSS 0.87%

    Vasion Print (formerly PrinterLogic) Virtual Appliance Host versions prior to 22.0.1002 and Application versions prior to 20.0.2614 (VA and SaaS deployments) contain multiple Docker containers that include outdated, end-of-life, unsupported, or otherwise vulnerable third-party co...

20. CVE-2025-10225 Incorrect Memory Allocation in OpenSSL-Based Session Module in AxxonSoft Axxon One (C-Werk)

    Published 2025-09-10

    High·CVSS 8.7 EPSS 0.40%

    Improper Restriction of Operations within the Bounds of a Memory Buffer (CWE-119) in the OpenSSL-based session module in AxxonSoft Axxon One (C-Werk) 2.0.6 and earlier on Windows allows a remote attacker under high load conditions to cause application crashes or unpredictable beh...

21. CVE-2025-42927 Information Disclosure due to Outdated OpenSSL Version in SAP NetWeaver AS Java (Adobe Document Service)

    Published 2025-09-09

    Low·CVSS 3.4 EPSS 0.14%

    SAP NetWeaver AS Java application uses Adobe Document Service, installed with a vulnerable version of OpenSSL.Successful exploitation of known vulnerabilities in the outdated OpenSSL library would allow user with high system privileges to access and modify system information.This...

22. CVE-2025-8614 NoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

    Published 2025-09-02

    High·CVSS 7.8 EPSS 0.27%

    NoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of NoMachine. An attacker must first obtain the ability to execute low-privileged code on the target sys...

23. CVE-2023-53159 `openssl` `X509VerifyParamRef::set_host` buffer over-read

    Published 2025-07-28

    Low·CVSS 3.3 EPSS 0.23%

    The openssl crate before 0.10.55 for Rust allows an out-of-bounds read via an empty string to X509VerifyParamRef::set_host.

24. CVE-2025-8069 Local Privilege Escalation Vulnerability in AWS Client VPN Windows Client

    Published 2025-07-23

    High·CVSS 7.3 EPSS 0.19%

    During the AWS Client VPN client installation on Windows devices, the install process references the C:\usr\local\windows-x86_64-openssl-localbuild\ssl directory location to fetch the OpenSSL configuration file. As a result, a non-admin user could place arbitrary code in the conf...

25. CVE-2025-0664 A locally authenticated, privileged user can craft a malicious OpenSSL configuration file, potentially leading the agent to load an arbitrary local library. This may impair endpoint defenses and allow...

    Published 2025-07-21

    Medium·CVSS 6.7 EPSS 0.20%

    A locally authenticated, privileged user can craft a malicious OpenSSL configuration file, potentially leading the agent to load an arbitrary local library. This may impair endpoint defenses and allow the attacker to achieve code execution with SYSTEM-level privileges.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.