Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 9 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,082All CVEsplus 19,119 rejected
- 502Last 24 hours2,856 in the last 7 days
- 16,885Last 30 days1,547 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 8 | 18 | 4 | 0 | 30 | 54 |
| 2025 | 2 | 4 | 5 | 2 | 0 | 13 | 24 |
| 2024 | 1 | 6 | 2 | 0 | 0 | 9 | 11 |
| 2023 | 1 | 1 | 0 | 0 | 0 | 2 | 2 |
| Title | ||
|---|---|---|
| CVE-2026-115402 | OpenVPN ovpn-dco-win 0.6.5 through 2.8.13 allows unprivileged local users to cause a denial of service (system crash) via a race condition in the TCP connect…OpenVPN · ovpn-dco-win | Medium5.7 |
| CVE-2026-106017 | Improper certificate validation in the OpenVPN 3 Core library version 3.4 through 3.11.7 allows attackers to circumvent extended key usage restrictions.OpenVPN · OpenVPN 3 Core Library | Medium6.3 |
| CVE-2026-84471 | The fix for CVE-2026-12996 was incomplete. A use-after-free in OpenVPN 2.6.0 through 2.6.22 and 2.7_alpha1 through 2.7.7 allows remote authenticated peers to…OpenVPN · OpenVPN | High7.2 |
| CVE-2026-105390 | Improper synchronization in the OpenVPN ovpn-dco-win for Windows versions 0.6.5 through 1.3.5 and 2.4.0 through 2.8.7 allows local attackers to trigger a…OpenVPN · ovpn-dco-win | Medium6.9 |
| CVE-2026-88964 | An integer underflow in OpenVPN version 2.7_alpha3 through 2.7.7 on Windows and Android allows remote authenticated servers to cause a denial of service or…OpenVPN · OpenVPN | High7.1 |
| CVE-2026-84790 | OpenVPN 2.7_alpha1 through 2.7.7 allows remote authenticated users to impersonate others via a crafted certificate subject fieldOpenVPN · OpenVPN | High7.6 |
| CVE-2026-82325 | A use-after-free vulnerability in the OpenVPN ovpn-dco-win driver version 2.5.0 through 2.8.6 allows local authenticated users to cause a system crash via…OpenVPN · ovpn-dco-win | Medium6.8 |
| CVE-2026-84732 | Retransmissions of ACK packet ID in OpenVPN through 2.6.22 and 2.7.6 allow remote unauthenticated attackers to cause a denial of service via crafted inputs…OpenVPN · OpenVPN | High8.7 |
| CVE-2026-84256 | An argument parsing issue in OpenVPN 2.1_rc10 through 2.6.22 and 2.7_alpha1 through 2.7.7 on Windows allows remote authenticated users to execute arbitrary…OpenVPN · OpenVPN | High7.7 |
| CVE-2026-84226 | OpenVPN version 2.5.0 through 2.6.22 and 2.7_alpha1 through 2.7.6 on Windows allows local authenticated users to perform a binary planting attack during…OpenVPN · OpenVPN | High8.5 |
| CVE-2026-82312 | OpenVPN 2.0.0 through 2.6.22 and 2.7_alpha1 through 2.7.6 on Windows allows local authenticated users to cause a denial of service via a NULL DACL on named IPC…OpenVPN · OpenVPN | Low1.8 |
| CVE-2026-81830 | The Windows interactive service in OpenVPN 2.4.0 through 2.6.22 allows local authenticated users to bypass the trusted configuration directory constraint via…OpenVPN · OpenVPN | Medium5.6 |
| CVE-2026-81738 | OpenVPN 2.5.0 through 2.7.6 on Windows using the tap-windows6 driver allows attackers to trigger an out-of-bounds write via crafted DOMAIN-SEARCH entriesOpenVPN · OpenVPN | Low2.3 |
| CVE-2026-78221 | An incorrect buffer size calculation in the Windows Interactive Service in OpenVPN 2.7_alpha1 through 2.7.6 allows local authenticated users to cause memory…OpenVPN · OpenVPN | Medium5.9 |
| CVE-2026-78043 | The Windows Interactive Service in OpenVPN 2.7_alpha1 through 2.7.6 allows local authenticated users to bypass the trusted configuration directory constraint…OpenVPN · OpenVPN | Medium5.6 |
| CVE-2026-63650 | OpenVPN 2.7_alpha1 through 2.7.5 using mbedTLS allows remote authenticated users to be misidentified by ignoring the configured X.509 username identity lookup…OpenVPN · OpenVPN | Low2.0 |
| CVE-2026-63649 | The Windows interactive service in OpenVPN 2.4.0 through 2.6.21 and 2.7_alpha1 through 2.7.5 allows local authenticated users to bypass the trusted…OpenVPN · OpenVPN | Medium4.1 |
| CVE-2026-12932 | A memory leak in the tls-crypt-v2 client key extraction in OpenVPN 2.5.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote attackers to cause a denial…OpenVPN · OpenVPN | High7.1 |
| CVE-2026-12996 | A use-after-free in OpenVPN 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote authenticated peers to potentially cause a denial of service or…OpenVPN · OpenVPN | Medium6.0 |
| CVE-2026-11771 | OpenVPN version 2.1.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows attackers via an off-by-one buffer write in the NTLM proxy authentication to…OpenVPN · OpenVPN | High7.0 |
| CVE-2026-13117 | An incomplete guard in OpenVPN 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote authenticated peers to trigger a use-after-free during TLS…OpenVPN · OpenVPN | Medium6.0 |
| CVE-2026-13379 | The Windows interactive service in OpenVPN 2.7_alpha1 through 2.7.4 allows remote attackers to cause persistent DNS state pollution or a service crash via a…OpenVPN · OpenVPN | Medium5.1 |
| CVE-2025-3110 | OpenVPN Access Server 2.7.2 through 3.1.0 accepts bare line-feed sequences inside HTTP header values, allowing remote attackers to perform HTTP request…OpenVPN · Access Server | Medium6.9 |
| CVE-2026-13122 | OpenVPN version 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote attackers to cause a denial of service via a malformed authentication token…Openvpn · OpenVPN | Medium5.9 |
| CVE-2026-13698 | A memory leak in OpenVPN version 2.5.0 through 2.5.11, 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote attackers with a valid tls-crypt-v2…OpenVPN · OpenVPN | Medium6.0 |
| CVE-2026-11604 | An incorrect buffer size calculation in the epoch key generator in OpenVPN ovpn-dco-win version 2.0.0 through 2.8.3 allows a remote authenticated peer to…OpenVPN · ovpn-dco-win | Medium5.6 |
| CVE-2026-40215 | A race condition in OpenVPN 2.6.0 through 2.6.19 and 2.7_alpha1 through 2.7.1 allows remote attackers to potentially cause a server crash or leak heap memory…OpenVPN · OpenVPN | Medium6.1 |
| CVE-2026-35058 | Improper validation of packet length during tls-crypt-v2 key extraction in OpenVPN 2.6.0 through 2.6.19 and 2.7_alpha1 through 2.7.1 allows authenticated…OpenVPN · OpenVPN | Medium6.9 |
| CVE-2026-2738 | Buffer overflow in ovpn‑dco‑win version 2.8.0 allows local attackers to cause a system crash by sending too large packets to the remote peer when the AEAD tag…OpenVPN · ovpn-dco-win | Medium5.6 |
| CVE-2025-15497 | Insufficient epoch key slot processing in OpenVPN 2.7_alpha1 through 2.7_rc5 allows remote authenticated users to trigger an assert resulting in a denial of…OpenVPN · OpenVPN | Low3.8 |
| CVE-2025-13086 | Improper validation of source IP addresses in OpenVPN version 2.6.0 through 2.6.15 and 2.7_alpha1 through 2.7_rc1 allows an attacker to open a session from a…OpenVPN · OpenVPN | Medium4.6 |
| CVE-2025-13751 | Interactive service agent in OpenVPN version 2.5.0 through 2.6.16 and 2.7_alpha1 through 2.7_rc2 on Windows allows a local authenticated user to connect to the…OpenVPN · OpenVPN | Low1.3 |
| CVE-2025-12106 | Insufficient argument validation in OpenVPN 2.7_alpha1 through 2.7_rc1 allows an attacker to trigger a heap buffer over-read when parsing IP addressesOpenVPN · OpenVPN | Critical9.1 |
| CVE-2025-50055 | Cross-site scripting (XSS) vulnerability in the SAML Authentication module in OpenVPN Access Server version 2.14.0 through 2.14.3 allows configured remote SAML…OpenVPN · Access Server | Medium6.4 |
| CVE-2025-10680 | OpenVPN 2.7_alpha1 through 2.7_beta1 on POSIX based platforms allows a remote authenticated server to inject shell commands via DNS variables when --dns-updown…OpenVPN · OpenVPN | High8.8 |
| CVE-2025-50054 | Buffer overflow in OpenVPN ovpn-dco-win version 1.3.0 and earlier and version 2.5.8 and earlier allows a local user process to send a too large control message…OpenVPN · ovpn-dco-win | Medium5.5 |
| CVE-2025-3908 | The configuration initialization tool in OpenVPN 3 Linux v20 through v24 on Linux allows a local attacker to use symlinks pointing at an arbitrary directory…OpenVPN · OpenVPN 3 Linux | Medium6.2 |
| CVE-2024-4877 | OpenVPN version 2.4.0 through 2.6.10 on Windows allows an external, lesser privileged process to create a named pipe which the OpenVPN GUI component would…OpenVPN · OpenVPN | High8.8 |
| CVE-2025-2704 | OpenVPN version 2.6.1 through 2.6.13 in server mode using TLS-crypt-v2 allows remote attackers to trigger a denial of service by corrupting and replaying…OpenVPN · OpenVPN | High7.5 |
| CVE-2024-13454 | Weak encryption algorithm in Easy-RSA version 3.0.5 through 3.1.7 allows a local attacker to more easily bruteforce the private CA key when created using…OpenVPN · Easy-RSA | Medium5.3 |
| CVE-2024-5198 | OpenVPN ovpn-dco for Windows version 1.1.1 allows an unprivileged local attacker to send I/O control messages with invalid data to the driver resulting in a…OpenVPN · ovpn-dco | Low3.3 |
| CVE-2024-8474 | OpenVPN Connect before version 3.5.0 can contain the configuration profile's clear-text private key which is logged in the application log, which an…OpenVPN · OpenVPN Connect | High7.5 |
| CVE-2024-5594 | OpenVPN before 2.6.11 does not santize PUSH_REPLY messages properly which an attacker controlling the server can use to inject unexpected arbitrary data ending…OpenVPN · OpenVPN | Critical9.1 |
| CVE-2024-28882 | OpenVPN from 2.6.0 through 2.6.10 in a server role accepts multiple exit notifications from authenticated clients which will extend the validity of a closing…OpenVPN · OpenVPN | Medium4.3 |
| CVE-2024-1305 | tap-windows6 driver version 9.26 and earlier does not properly check the size data of incomming write operations which an attacker can use to overflow memory…OpenVPN · tap-windows6 | Critical9.8 |
| CVE-2024-27903 | OpenVPN plug-ins on Windows with OpenVPN 2.6.9 and earlier could be loaded from any directory, which allows an attacker to load an arbitrary plug-in which can…OpenVPN · OpenVPN 2 | High7.2 |
| CVE-2024-24974 | The interactive service in OpenVPN 2.6.9 and earlier allows the OpenVPN service pipe to be accessed remotely, which allows a remote attacker to interact with…OpenVPN · OpenVPN 2 | High7.5 |
| CVE-2024-27459 | The interactive service in OpenVPN 2.6.9 and earlier allows an attacker to send data causing a stack overflow which can be used to execute arbitrary code with…OpenVPN · OpenVPN GUI | High7.2 |
| CVE-2023-7235 | The OpenVPN GUI installer before version 2.6.9 did not set the proper access control restrictions to the installation directory of OpenVPN binaries when using…OpenVPN · OpenVPN | High8.4 |
| CVE-2023-6247 | The PKCS#7 parser in OpenVPN 3 Core Library versions through 3.8.3 did not properly validate the parsed data, which would result in the application crashing.OpenVPN · OpenVPN 3 Core Library | Medium6.5 |