Skip to content

Product

azure linux openvmm vulnerabilities

20 published CVES affecting azure linux openvmm, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
20
Critical
1
High
9
Medium
9
Low
1
Unscored
0
CISA KEV
0

Latest azure linux openvmm CVEs

Newest publication first

  3. CVE-2026-35191 QUIC Unvalidated Amplification Credit may be Over Accounted

    Published
    LowCVSS 3.7 EPSS 0.72%

    Issue summary: The OpenSSL QUIC server, when configured to not preform address validation, can be forced to count incoming packets multiple times in its unvalidated credit computation, leading to a violation of the RFC 9000 unvalidated connection amplification limit of 3 times th...

  4. CVE-2026-92987 roxmltree through 0.21.1 Denial of Service via Quadratic Parsing

    Published
    HighCVSS 8.7 EPSS 0.63%

    roxmltree through 0.21.1 performs quadratic-time attribute and namespace validation during XML parsing without limits on attribute count. Attackers can craft XML documents with tens of thousands of attributes on a single element to consume excessive CPU time and cause denial of s...

  5. CVE-2026-14456 Unbounded Memory Growth in QUIC Server Incoming Channel Queue

    Published
    HighCVSS 7.5 EPSS 0.73%

    Issue summary: When an OpenSSL QUIC server (Listener SSL object) processes valid QUIC Initial packets for unknown destination connection IDs, it can allocate and queue new incoming channels without enforcing any limit. Impact summary: A remote peer that can make many Initial pack...

  6. CVE-2026-54876 Client-Side Memory Leak in OCSP Response Checking

    Published
    HighCVSS 7.5 EPSS 0.50%

    Issue summary: A malicious TLS server can cause a memory leak in a TLS client that has enabled OCSP response checking by sending an OCSP response that contains no single response entries. Impact summary: An attacker can leak an attacker-tunable amount of memory per TLS handshake...

  8. CVE-2026-42764 NULL Pointer Dereference in QUIC Server Initial Packet Handling

    Published
    HighCVSS 7.5 EPSS 1.2%

    Issue summary: Receiving a QUIC initial packet with an invalid token may trigger a NULL pointer dereference in the OpenSSL QUIC server with address validation disabled. Impact summary: NULL pointer dereference typically causes abnormal termination of the affected QUIC server proc...

  9. CVE-2026-34181 PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys

    Published
    HighCVSS 7.4 EPSS 0.38%

    Issue Summary: The PKCS#12 file processing fails to perform sufficient input validation for files that use Password-Based Message Authentication Code 1 (PBMAC1) integrity mechanism allowing a certificate and private key forgery. Impact Summary: An attacker impersonating a user ca...

  11. CVE-2026-22795 Missing ASN1_TYPE validation in PKCS#12 parsing

    Published
    MediumCVSS 5.5 EPSS 0.18%

    Issue summary: An invalid or NULL pointer dereference can happen in an application processing a malformed PKCS#12 file. Impact summary: An application processing a malformed PKCS#12 file can be caused to dereference an invalid or NULL pointer on memory read, resulting in a Denial...

  12. CVE-2025-69421 NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function

    Published
    HighCVSS 7.5 EPSS 0.94%

    Issue summary: Processing a malformed PKCS#12 file can trigger a NULL pointer dereference in the PKCS12_item_decrypt_d2i_ex() function. Impact summary: A NULL pointer dereference can trigger a crash which leads to Denial of Service for an application processing PKCS#12 files. The...

  14. CVE-2025-69419 Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion

    Published
    HighCVSS 7.4 EPSS 0.61%

    Issue summary: Calling PKCS12_get_friendlyname() function on a maliciously crafted PKCS#12 file with a BMPString (UTF-16BE) friendly name containing non-ASCII BMP code point can trigger a one byte write before the allocated buffer. Impact summary: The out-of-bounds write can caus...

  16. CVE-2025-68160 Heap out-of-bounds write in BIO_f_linebuffer on short writes

    Published
    MediumCVSS 4.7 EPSS 0.19%

    Issue summary: Writing large, newline-free data into a BIO chain using the line-buffering filter where the next BIO performs short writes can trigger a heap-based out-of-bounds write. Impact summary: This out-of-bounds write can cause memory corruption which typically results in...

  17. CVE-2025-66199 TLS 1.3 CompressedCertificate excessive memory allocation

    Published
    MediumCVSS 5.9 EPSS 0.46%

    Issue summary: A TLS 1.3 connection using certificate compression can be forced to allocate a large buffer before decompression without checking against the configured certificate size limit. Impact summary: An attacker can cause per-connection memory allocations of up to approxi...

  18. CVE-2025-15469 'openssl dgst' one-shot codepath silently truncates inputs >16MB

    Published
    MediumCVSS 5.5 EPSS 0.21%

    Issue summary: The 'openssl dgst' command-line tool silently truncates input data to 16MB when using one-shot signing algorithms and reports success instead of an error. Impact summary: A user signing or verifying files larger than 16MB with one-shot algorithms (such as Ed25519,...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.