Known Vulnerabilities for OpenSSL by OpenSSL Software Foundation
Listed below are 10 of the newest known vulnerabilities associated with "OpenSSL" by "OpenSSL Software Foundation".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-41898 json | rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.9.24 to before 0.10.78, the FFI trampolines... | Not Provided | 2026-04-24 | 2026-04-24 |
| CVE-2026-41681 json | rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.10.39 to before 0.10.78, EVP_DigestFinal() ... | Not Provided | 2026-04-24 | 2026-04-24 |
| CVE-2026-41678 json | rust-openssl provides OpenSSL bindings for the Rust programming language. From to before 0.10.78, aes::unwrap_key() contain... | Not Provided | 2026-04-24 | 2026-04-24 |
| CVE-2026-41677 json | rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.9.0 to before 0.10.78, the *_from_pem_callb... | Not Provided | 2026-04-24 | 2026-04-24 |
| CVE-2026-41676 json | rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.9.27 to before 0.10.78, Deriver::derive (an... | Not Provided | 2026-04-24 | 2026-04-24 |
| CVE-2026-40004 json | There exists an openssl.cnf privilege escalation vulnerability in ZTE Cloud PC client uSmartview. An attacker can execute arb... | Not Provided | 2026-05-07 | 2026-05-07 |
| CVE-2026-37554 json | An issue was discovered in Vanetza V2X v26.02 allowing remote unauthorized attackers to cause a denial of service. The vulner... | Not Provided | 2026-05-01 | 2026-05-07 |
| CVE-2026-34054 json | vcpkg is a free and open-source C/C++ package manager. Prior to version 3.6.1#3, vcpkg's Windows builds of OpenSSL set openss... | Not Provided | 2026-03-31 | 2026-03-31 |
| CVE-2026-33895 json | Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. Prior to version 1.4.0... | Not Provided | 2026-03-27 | 2026-03-31 |
| CVE-2026-31789 json | Issue summary: Converting an excessively large OCTET STRING value to a hexadecimal string leads to a heap buffer overflow on ... | Not Provided | 2026-04-07 | 2026-05-12 |