OpenVPN vulnerabilities

CVEs per yearBy the year they were published

1. 20232
2. 20249
3. 202513
4. 202630

Newest CVEs

• CVE-2026-115402

  OpenVPN ovpn-dco-win 0.6.5 through 2.8.13 allows unprivileged local users to cause a denial of service (system crash) via a race condition in the TCP connect…

  OpenVPN · ovpn-dco-win

  Medium5.7
• CVE-2026-106017

  Improper certificate validation in the OpenVPN 3 Core library version 3.4 through 3.11.7 allows attackers to circumvent extended key usage restrictions.

  OpenVPN · OpenVPN 3 Core Library

  Medium6.3
• CVE-2026-84471

  The fix for CVE-2026-12996 was incomplete. A use-after-free in OpenVPN 2.6.0 through 2.6.22 and 2.7_alpha1 through 2.7.7 allows remote authenticated peers to…

  OpenVPN · OpenVPN

  High7.2
• CVE-2026-105390

  Improper synchronization in the OpenVPN ovpn-dco-win for Windows versions 0.6.5 through 1.3.5 and 2.4.0 through 2.8.7 allows local attackers to trigger a…

  OpenVPN · ovpn-dco-win

  Medium6.9
• CVE-2026-88964

  An integer underflow in OpenVPN version 2.7_alpha3 through 2.7.7 on Windows and Android allows remote authenticated servers to cause a denial of service or…

  OpenVPN · OpenVPN

  High7.1
• CVE-2026-84790

  OpenVPN 2.7_alpha1 through 2.7.7 allows remote authenticated users to impersonate others via a crafted certificate subject field

  OpenVPN · OpenVPN

  High7.6
• CVE-2026-82325

  A use-after-free vulnerability in the OpenVPN ovpn-dco-win driver version 2.5.0 through 2.8.6 allows local authenticated users to cause a system crash via…

  OpenVPN · ovpn-dco-win

  Medium6.8
• CVE-2026-84732

  Retransmissions of ACK packet ID in OpenVPN through 2.6.22 and 2.7.6 allow remote unauthenticated attackers to cause a denial of service via crafted inputs…

  OpenVPN · OpenVPN

  High8.7
• CVE-2026-84256

  An argument parsing issue in OpenVPN 2.1_rc10 through 2.6.22 and 2.7_alpha1 through 2.7.7 on Windows allows remote authenticated users to execute arbitrary…

  OpenVPN · OpenVPN

  High7.7
• CVE-2026-84226

  OpenVPN version 2.5.0 through 2.6.22 and 2.7_alpha1 through 2.7.6 on Windows allows local authenticated users to perform a binary planting attack during…

  OpenVPN · OpenVPN

  High8.5