CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-19 10:00 UTC )
This week: 5,470 CVEs published, 357 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,470 Show in the list Critical, last 7 days 357 Show in the list Healthcare-tagged, last 7 days 4 Show in the list Known exploited (CISA KEV) 1,747 Show in the list Showing CVEs that name the product openssl:openssl . Show all products
106 CVEs, showing 1 to 50 Page 1 of 3 Next CVE Severity Title Published CVE-2014-0160 Known exploited
High 7.5 The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process… Assigned by redhat
Apr 7, 2014 CVE-2015-0204 Medium 4.3 The ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k allows remote SSL servers to conduct RSA-to-EXPORT_RSA downgrade attacks and fa… Assigned by redhat
Jan 9, 2015 CVE-2018-0737 Medium 5.9 Cache timing vulnerability in RSA Key Generation Assigned by openssl
Apr 16, 2018 CVE-2018-0732 High 7.5 Client DoS due to large DH parameter Assigned by openssl
Jun 12, 2018 CVE-2018-0735 Medium 5.9 Timing attack against ECDSA signature generation Assigned by openssl
Oct 29, 2018 CVE-2018-0734 Medium 5.9 Timing attack against DSA Assigned by openssl
Oct 30, 2018 CVE-2018-5407 Medium 4.7 Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software vulnerable to timing attacks via a side-channel timing attack on 'port contention'. Assigned by certcc
Nov 15, 2018 CVE-2019-1563 Low 3.7 Padding Oracle in PKCS7_dataDecode and CMS_decrypt_set1_pkey Assigned by openssl
Sep 10, 2019 CVE-2019-1551 Medium 5.3 rsaz_512_sqr overflow bug on x86_64 Assigned by openssl
Dec 6, 2019 CVE-2020-1967 High 7.5 Segmentation fault in SSL_check_chain Assigned by openssl
Apr 21, 2020 CVE-2021-3449 Medium 5.9 NULL pointer deref in signature_algorithms processing Assigned by openssl
Mar 25, 2021 CVE-2021-3450 High 7.4 CA certificate check bypass with X509_V_FLAG_X509_STRICT Assigned by openssl
Mar 25, 2021 CVE-2021-3711 Critical 9.8 SM2 Decryption Buffer Overflow Assigned by openssl
Aug 24, 2021 CVE-2022-0778 High 7.5 Infinite loop in BN_mod_sqrt() reachable when parsing certificates Assigned by openssl
Mar 15, 2022 CVE-2022-1292 Critical 9.8 The c_rehash script allows command injection Assigned by openssl
May 3, 2022 CVE-2022-1343 Medium 5.3 OCSP_basic_verify may incorrectly verify the response signing certificate Assigned by openssl
May 3, 2022 CVE-2022-1434 Medium 5.9 Incorrect MAC key used in the RC4-MD5 ciphersuite Assigned by openssl
May 3, 2022 CVE-2022-1473 High 7.5 Resource leakage when decoding certificates and keys Assigned by openssl
May 3, 2022 CVE-2022-2068 Critical 9.8 The c_rehash script allows command injection Assigned by openssl
Jun 21, 2022 CVE-2022-2274 Critical 9.8 RSA implementation bug in AVX512IFMA instructions Assigned by openssl
Jul 1, 2022 CVE-2022-2097 Medium 5.3 AES OCB fails to encrypt some bytes Assigned by openssl
Jul 5, 2022 CVE-2023-0286 High 7.4 X.400 address type confusion in X.509 GeneralName Assigned by openssl
Feb 8, 2023 CVE-2023-0215 High 7.5 Use-after-free following BIO_new_NDEF Assigned by openssl
Feb 8, 2023 CVE-2022-4450 High 7.5 Double free after calling PEM_read_bio_ex Assigned by openssl
Feb 8, 2023 CVE-2022-4304 Medium 5.9 Timing Oracle in RSA Decryption Assigned by openssl
Feb 8, 2023 CVE-2023-0464 High 7.5 Excessive Resource Usage Verifying X.509 Policy Constraints Assigned by openssl
Mar 22, 2023 CVE-2023-0465 Medium 5.3 Invalid certificate policies in leaf certificates are silently ignored Assigned by openssl
Mar 28, 2023 CVE-2023-0466 Medium 5.3 Certificate policy check not enabled Assigned by openssl
Mar 28, 2023 CVE-2023-2650 Medium 6.5 Possible DoS translating ASN.1 object identifiers Assigned by openssl
May 30, 2023 CVE-2023-3446 Medium 5.3 Excessive time spent checking DH keys and parameters Assigned by openssl
Jul 19, 2023 CVE-2023-3817 Medium 5.3 Excessive time spent checking DH q parameter value Assigned by openssl
Jul 31, 2023 CVE-2023-4807 High 7.8 POLY1305 MAC implementation corrupts XMM registers on Windows Assigned by openssl
Sep 8, 2023 CVE-2023-5363 High 7.5 Incorrect cipher key & IV length processing Assigned by openssl
Oct 24, 2023 CVE-2023-5678 Medium 5.3 Excessive time spent in DH check / generation with large Q parameter value Assigned by openssl
Nov 6, 2023 CVE-2023-6129 Medium 6.5 POLY1305 MAC implementation corrupts vector registers on PowerPC Assigned by openssl
Jan 9, 2024 CVE-2024-0727 Medium 5.5 PKCS12 Decoding crashes Assigned by openssl
Jan 26, 2024 CVE-2024-2511 Medium 5.9 Unbounded memory growth with session handling in TLSv1.3 Assigned by openssl
Apr 8, 2024 CVE-2023-6237 Medium 5.9 Excessive time spent checking invalid RSA public keys Assigned by openssl
Apr 25, 2024 CVE-2024-5535 Critical 9.1 SSL_select_next_proto buffer overread Assigned by openssl
Jun 27, 2024 CVE-2024-6119 High 7.5 Possible denial of service in X.509 name checks Assigned by openssl
Sep 3, 2024 CVE-2024-9143 Medium 4.3 Low-level invalid GF(2^m) parameters lead to OOB memory access Assigned by openssl
Oct 16, 2024 CVE-2025-9230 High 7.5 Out-of-bounds read & write in RFC 3211 KEK Unwrap Assigned by openssl
Sep 30, 2025 CVE-2025-9232 Medium 5.9 Out-of-bounds read in HTTP client no_proxy handling Assigned by openssl
Sep 30, 2025 CVE-2025-15467 High 8.8 Stack buffer overflow in CMS (Auth)EnvelopedData parsing Assigned by openssl
Jan 27, 2026 CVE-2025-68160 Medium 4.7 Heap out-of-bounds write in BIO_f_linebuffer on short writes Assigned by openssl
Jan 27, 2026 CVE-2025-69418 Medium 4.0 Unauthenticated/unencrypted trailing bytes with low-level OCB function calls Assigned by openssl
Jan 27, 2026 CVE-2025-69419 High 7.4 Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion Assigned by openssl
Jan 27, 2026 CVE-2025-69420 High 7.5 Missing ASN1_TYPE validation in TS_RESP_verify_response() function Assigned by openssl
Jan 27, 2026 CVE-2025-69421 High 7.5 NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function Assigned by openssl
Jan 27, 2026 CVE-2026-22795 Medium 5.5 Missing ASN1_TYPE validation in PKCS#12 parsing Assigned by openssl
Jan 27, 2026
CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
