{"items":[{"id":"CVE-2026-84784","published":"2026-09-29T15:32:25.758Z","updated":"2026-09-29T16:44:09.766Z","title":"QUIC: Unbounded RETIRE_CONNECTION_ID Backlog","severity":"HIGH","score":7.5,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.00607,"kevAdded":null},{"id":"CVE-2026-84783","published":"2026-09-29T15:32:24.699Z","updated":"2026-09-29T16:42:41.306Z","title":"Use-After-Free in X.509 Extension Cache Under Concurrent Use","severity":"HIGH","score":7.5,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.0029,"kevAdded":null},{"id":"CVE-2026-84782","published":"2026-09-29T15:32:23.605Z","updated":"2026-09-29T16:45:40.378Z","title":"DTLS Retransmits Handshake Messages From a Stale Buffer Offset","severity":"HIGH","score":8.2,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.00831,"kevAdded":null},{"id":"CVE-2026-77696","published":"2026-09-29T15:32:22.520Z","updated":"2026-09-29T16:51:33.618Z","title":"Timing Side-Channel in SM2 Signature Generation","severity":"LOW","score":3.7,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.00396,"kevAdded":null},{"id":"CVE-2026-75806","published":"2026-09-29T15:32:21.457Z","updated":"2026-09-29T16:53:23.785Z","title":"Unauthenticated and Undersized DTLS 1.2 AEAD Record Causes DoS","severity":"MEDIUM","score":5.3,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.01104,"kevAdded":null},{"id":"CVE-2026-75805","published":"2026-09-29T15:32:20.408Z","updated":"2026-09-29T16:54:39.263Z","title":"NULL Pointer Dereference in CMP Client Revocation Response Handling","severity":"MEDIUM","score":5.3,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.00324,"kevAdded":null},{"id":"CVE-2026-75804","published":"2026-09-29T15:32:19.335Z","updated":"2026-09-29T17:15:40.043Z","title":"QUIC Connection-Level Flow Control is Not Enforced for Streams","severity":"MEDIUM","score":5.3,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.00529,"kevAdded":null},{"id":"CVE-2026-72897","published":"2026-09-29T15:32:18.277Z","updated":"2026-09-29T17:16:38.842Z","title":"Out-of-Bounds Access After SSL_set_SSL_CTX() During a Handshake","severity":"HIGH","score":7.5,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.00388,"kevAdded":null},{"id":"CVE-2026-54875","published":"2026-09-29T15:32:17.206Z","updated":"2026-09-29T17:17:20.483Z","title":"Non-Constant-Time SM2 Scalar Multiplication on ARM64 and RISC-V","severity":"LOW","score":3.7,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.00479,"kevAdded":null},{"id":"CVE-2026-54873","published":"2026-09-29T15:32:16.134Z","updated":"2026-09-30T20:11:09.162Z","title":"QUIC STREAM Fragment Metadata DoS","severity":"HIGH","score":7.5,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.00722,"kevAdded":null},{"id":"CVE-2026-54872","published":"2026-09-29T15:32:15.075Z","updated":"2026-09-29T17:28:12.657Z","title":"Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves","severity":"LOW","score":3.7,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.00444,"kevAdded":null},{"id":"CVE-2026-42772","published":"2026-09-29T15:32:14.009Z","updated":"2026-09-30T20:11:09.295Z","title":"Potential CPU DoS via O(n^2) Fragment Reassembly in QUIC","severity":"MEDIUM","score":5.3,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.00497,"kevAdded":null},{"id":"CVE-2026-35191","published":"2026-09-29T15:32:12.944Z","updated":"2026-09-30T20:11:09.437Z","title":"QUIC Unvalidated Amplification Credit may be Over Accounted","severity":"LOW","score":3.7,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.00723,"kevAdded":null},{"id":"CVE-2026-35189","published":"2026-09-29T15:32:11.889Z","updated":"2026-09-30T20:11:09.577Z","title":"Excessive Memory Allocation in Relative CRLDP Processing","severity":"MEDIUM","score":5.3,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.00317,"kevAdded":null},{"id":"CVE-2026-75803","published":"2026-08-25T13:00:25.067Z","updated":"2026-09-01T18:23:06.793Z","title":"AEAD Forgeries with Empty Ciphertext When Using EVP_Cipher()","severity":"CRITICAL","score":9.1,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.00254,"kevAdded":null},{"id":"CVE-2026-63076","published":"2026-08-25T13:00:11.218Z","updated":"2026-08-25T14:37:32.193Z","title":"Invalid Pointer Dereference in CMP Server via Crafted protectionAlg","severity":"HIGH","score":7.5,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.01602,"kevAdded":null},{"id":"CVE-2026-63075","published":"2026-08-25T13:00:04.752Z","updated":"2026-08-25T14:36:51.928Z","title":"QUIC ACK-only Packet Retention Can Cause Memory Exhaustion","severity":"HIGH","score":7.5,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.0057,"kevAdded":null},{"id":"CVE-2026-63074","published":"2026-08-25T12:59:58.278Z","updated":"2026-08-25T14:36:13.170Z","title":"CMP Indefinite Cache Growth of ExtraCerts","severity":"MEDIUM","score":5.9,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.00588,"kevAdded":null},{"id":"CVE-2026-63073","published":"2026-08-25T12:59:43.356Z","updated":"2026-08-31T19:12:54.136Z","title":"Untrusted Sender DN Used as Format String in CMP Response Validation","severity":"CRITICAL","score":9.8,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.01159,"kevAdded":null},{"id":"CVE-2026-63072","published":"2026-08-25T12:59:34.428Z","updated":"2026-08-25T14:29:55.378Z","title":"Heap Buffer Overflow in CMS Key Unwrapping","severity":"HIGH","score":7.5,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.00916,"kevAdded":null},{"id":"CVE-2026-54874","published":"2026-08-25T12:59:17.912Z","updated":"2026-08-25T14:28:37.339Z","title":"Excessive Memory Use Buffering DTLS Records for a Future Epoch","severity":"HIGH","score":7.5,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.00622,"kevAdded":null},{"id":"CVE-2026-18798","published":"2026-08-25T12:59:04.715Z","updated":"2026-08-25T14:15:04.879Z","title":"QUIC Server May Trigger Double Free When Processing INITIAL Packet","severity":"HIGH","score":7.5,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.01697,"kevAdded":null},{"id":"CVE-2026-14457","published":"2026-08-25T12:58:29.349Z","updated":"2026-08-25T14:13:27.811Z","title":"RPK Server Signature Algorithm Selection Can Dereference a Missing Certificate","severity":"HIGH","score":7.5,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.01167,"kevAdded":null},{"id":"CVE-2026-14456","published":"2026-08-13T13:55:52.370Z","updated":"2026-08-13T17:41:29.420Z","title":"Unbounded Memory Growth in QUIC Server Incoming Channel Queue","severity":"HIGH","score":7.5,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.00729,"kevAdded":null},{"id":"CVE-2026-54876","published":"2026-08-05T13:59:36.466Z","updated":"2026-08-05T19:31:51.591Z","title":"Client-Side Memory Leak in OCSP Response Checking","severity":"HIGH","score":7.5,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.00524,"kevAdded":null},{"id":"CVE-2026-45447","published":"2026-06-09T16:03:32.914Z","updated":"2026-09-18T12:04:50.529Z","title":"Heap Use-After-Free in the PKCS7_verify() Function","severity":"HIGH","score":8.8,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.04002,"kevAdded":null},{"id":"CVE-2026-45446","published":"2026-06-09T16:03:32.120Z","updated":"2026-06-10T07:48:14.092Z","title":"Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes","severity":"MEDIUM","score":4.8,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.00439,"kevAdded":null},{"id":"CVE-2026-45445","published":"2026-06-09T16:03:31.338Z","updated":"2026-06-10T07:48:10.949Z","title":"AES-OCB IV Ignored on EVP_Cipher() Path","severity":"HIGH","score":7.5,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.00704,"kevAdded":null},{"id":"CVE-2026-42771","published":"2026-06-09T16:03:30.565Z","updated":"2026-06-10T07:48:09.673Z","title":"Possible Out of Bounds Read in X509_VERIFY_PARAM_set1_email()","severity":"MEDIUM","score":6.2,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.00218,"kevAdded":null},{"id":"CVE-2026-42770","published":"2026-06-09T16:03:29.802Z","updated":"2026-07-20T16:09:50.313Z","title":"FFC-DH Peer Validation Uses Attacker-Supplied q","severity":"LOW","score":3.7,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.00503,"kevAdded":null},{"id":"CVE-2026-42769","published":"2026-06-09T16:03:28.999Z","updated":"2026-06-10T07:48:06.084Z","title":"Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate","severity":"MEDIUM","score":5.3,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.00544,"kevAdded":null},{"id":"CVE-2026-42768","published":"2026-06-09T16:03:28.206Z","updated":"2026-06-10T07:48:04.770Z","title":"Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt()","severity":"LOW","score":3.7,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.00801,"kevAdded":null},{"id":"CVE-2026-42767","published":"2026-06-09T16:03:27.435Z","updated":"2026-06-10T07:48:03.405Z","title":"NULL Pointer Dereference in CRMF EncryptedValue Decryption","severity":"MEDIUM","score":5.9,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.00557,"kevAdded":null},{"id":"CVE-2026-42766","published":"2026-06-09T16:03:26.679Z","updated":"2026-06-10T07:48:01.992Z","title":"Possible NULL Dereference in Password-Based CMS Decryption","severity":"MEDIUM","score":5.9,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.0106,"kevAdded":null},{"id":"CVE-2026-42765","published":"2026-06-09T16:03:25.934Z","updated":"2026-06-10T07:48:00.427Z","title":"NULL Dereference in Certificate Verification with OCSP Checking","severity":"HIGH","score":7.5,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.00508,"kevAdded":null},{"id":"CVE-2026-42764","published":"2026-06-09T16:03:25.161Z","updated":"2026-06-10T07:47:58.940Z","title":"NULL Pointer Dereference in QUIC Server Initial Packet Handling","severity":"HIGH","score":7.5,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.01165,"kevAdded":null},{"id":"CVE-2026-35188","published":"2026-06-09T16:03:24.395Z","updated":"2026-06-10T20:02:41.587Z","title":"Double-free When Checking OCSP Stapled Response","severity":"MEDIUM","score":5,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.00302,"kevAdded":null},{"id":"CVE-2026-34183","published":"2026-06-09T16:03:23.623Z","updated":"2026-06-10T15:51:12.557Z","title":"Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler","severity":"HIGH","score":7.5,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.01049,"kevAdded":null},{"id":"CVE-2026-34182","published":"2026-06-09T16:03:22.848Z","updated":"2026-06-10T15:58:52.695Z","title":"CMS AuthEnvelopedData Processing May Accept Forged Messages","severity":"CRITICAL","score":9.1,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.01057,"kevAdded":null},{"id":"CVE-2026-34181","published":"2026-06-09T16:03:22.065Z","updated":"2026-06-10T16:02:19.675Z","title":"PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys","severity":"HIGH","score":7.4,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.00376,"kevAdded":null},{"id":"CVE-2026-34180","published":"2026-06-09T16:03:17.082Z","updated":"2026-06-10T07:47:52.427Z","title":"Heap Buffer Over-read in ASN.1 Content Parsing","severity":"HIGH","score":7.5,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.01025,"kevAdded":null},{"id":"CVE-2026-9076","published":"2026-06-09T16:03:16.306Z","updated":"2026-06-10T07:47:51.139Z","title":"Out-of-Bounds Read in CMS Password-Based Decryption","severity":"HIGH","score":7.5,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.00707,"kevAdded":null},{"id":"CVE-2026-7383","published":"2026-06-09T16:03:15.508Z","updated":"2026-06-10T07:47:47.578Z","title":"Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion","severity":"HIGH","score":8.1,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.00804,"kevAdded":null},{"id":"CVE-2026-31790","published":"2026-04-07T22:00:56.698Z","updated":"2026-05-12T12:09:06.208Z","title":"Incorrect Failure Handling in RSA KEM RSASVE Encapsulation","severity":"HIGH","score":7.5,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.01049,"kevAdded":null},{"id":"CVE-2026-31789","published":"2026-04-07T22:00:54.983Z","updated":"2026-05-12T12:09:05.071Z","title":"Heap Buffer Overflow in Hexadecimal Conversion","severity":"MEDIUM","score":5.8,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.00253,"kevAdded":null},{"id":"CVE-2026-28390","published":"2026-04-07T22:00:54.172Z","updated":"2026-10-15T01:15:35.711Z","title":"Possible NULL Dereference When Processing CMS KeyTransportRecipientInfo","severity":"HIGH","score":7.5,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.00836,"kevAdded":null},{"id":"CVE-2026-28389","published":"2026-04-07T22:00:53.364Z","updated":"2026-10-15T01:15:34.490Z","title":"Possible NULL Dereference When Processing CMS KeyAgreeRecipientInfo","severity":"HIGH","score":7.5,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.00836,"kevAdded":null},{"id":"CVE-2026-28388","published":"2026-04-07T22:00:52.382Z","updated":"2026-10-15T01:15:33.077Z","title":"NULL Pointer Dereference When Processing a Delta CRL","severity":"HIGH","score":7.5,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.00919,"kevAdded":null},{"id":"CVE-2026-28387","published":"2026-04-07T22:00:51.496Z","updated":"2026-10-15T01:15:31.851Z","title":"Potential Use-after-free in DANE Client Code","severity":"HIGH","score":8.1,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.00697,"kevAdded":null},{"id":"CVE-2026-28386","published":"2026-04-07T22:00:50.164Z","updated":"2026-04-10T20:16:08.389Z","title":"Out-of-bounds Read in AES-CFB-128 on X86-64 with AVX-512 Support","severity":"CRITICAL","score":9.1,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.00516,"kevAdded":null},{"id":"CVE-2026-2673","published":"2026-03-13T13:23:00.376Z","updated":"2026-05-18T19:23:37.078Z","title":"OpenSSL TLS 1.3 server may choose unexpected key agreement group","severity":"MEDIUM","score":6.5,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.00453,"kevAdded":null},{"id":"CVE-2026-22796","published":"2026-01-27T16:01:28.150Z","updated":"2026-10-15T01:12:21.460Z","title":"ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function","severity":"MEDIUM","score":5.3,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.00589,"kevAdded":null},{"id":"CVE-2026-22795","published":"2026-01-27T16:01:27.320Z","updated":"2026-10-15T01:12:20.101Z","title":"Missing ASN1_TYPE validation in PKCS#12 parsing","severity":"MEDIUM","score":5.5,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.00179,"kevAdded":null},{"id":"CVE-2025-69421","published":"2026-01-27T16:01:26.435Z","updated":"2026-10-15T01:10:29.317Z","title":"NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function","severity":"HIGH","score":7.5,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.00944,"kevAdded":null},{"id":"CVE-2025-69420","published":"2026-01-27T16:01:25.643Z","updated":"2026-10-15T01:10:28.084Z","title":"Missing ASN1_TYPE validation in TS_RESP_verify_response() function","severity":"HIGH","score":7.5,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.0092,"kevAdded":null},{"id":"CVE-2025-69419","published":"2026-01-27T16:01:24.822Z","updated":"2026-10-15T01:10:26.835Z","title":"Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion","severity":"HIGH","score":7.4,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.00607,"kevAdded":null},{"id":"CVE-2025-69418","published":"2026-01-27T16:01:23.986Z","updated":"2026-10-15T01:10:25.604Z","title":"Unauthenticated/unencrypted trailing bytes with low-level OCB function calls","severity":"MEDIUM","score":4,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.00132,"kevAdded":null},{"id":"CVE-2025-68160","published":"2026-01-27T16:01:23.181Z","updated":"2026-10-15T01:09:37.639Z","title":"Heap out-of-bounds write in BIO_f_linebuffer on short writes","severity":"MEDIUM","score":4.7,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.00189,"kevAdded":null},{"id":"CVE-2025-66199","published":"2026-01-27T16:01:22.399Z","updated":"2026-01-29T15:03:51.754Z","title":"TLS 1.3 CompressedCertificate excessive memory allocation","severity":"MEDIUM","score":5.9,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.00463,"kevAdded":null},{"id":"CVE-2025-15469","published":"2026-01-27T16:01:21.597Z","updated":"2026-01-29T14:54:35.153Z","title":"'openssl dgst' one-shot codepath silently truncates inputs >16MB","severity":"MEDIUM","score":5.5,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.00213,"kevAdded":null},{"id":"CVE-2025-15468","published":"2026-01-27T16:01:20.824Z","updated":"2026-01-29T14:53:03.572Z","title":"NULL dereference in SSL_CIPHER_find() function on unknown cipher ID","severity":"MEDIUM","score":5.9,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.00819,"kevAdded":null},{"id":"CVE-2025-15467","published":"2026-01-27T16:01:19.922Z","updated":"2026-10-15T01:02:38.859Z","title":"Stack buffer overflow in CMS (Auth)EnvelopedData parsing","severity":"HIGH","score":8.8,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.74793,"kevAdded":null},{"id":"CVE-2025-11187","published":"2026-01-27T15:59:41.681Z","updated":"2026-03-20T14:07:14.610Z","title":"Improper validation of PBMAC1 parameters in PKCS#12 MAC verification","severity":"MEDIUM","score":6.1,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.05234,"kevAdded":null},{"id":"CVE-2025-9232","published":"2025-09-30T13:17:19.172Z","updated":"2026-10-15T01:02:23.968Z","title":"Out-of-bounds read in HTTP client no_proxy handling","severity":"MEDIUM","score":5.9,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.02001,"kevAdded":null},{"id":"CVE-2025-9231","published":"2025-09-30T13:17:12.007Z","updated":"2026-07-14T12:39:17.450Z","title":"Timing side-channel in SM2 algorithm on 64 bit ARM","severity":"MEDIUM","score":6.5,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.02242,"kevAdded":null},{"id":"CVE-2025-9230","published":"2025-09-30T13:17:00.808Z","updated":"2026-10-15T01:02:22.327Z","title":"Out-of-bounds read & write in RFC 3211 KEK Unwrap","severity":"HIGH","score":7.5,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.01554,"kevAdded":null},{"id":"CVE-2025-4575","published":"2025-05-22T13:36:49.694Z","updated":"2025-05-22T16:03:42.330Z","title":"The x509 application adds trusted use instead of rejected use","severity":"MEDIUM","score":6.5,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.00382,"kevAdded":null},{"id":"CVE-2024-12797","published":"2025-02-11T15:59:36.719Z","updated":"2025-02-18T14:01:55.140Z","title":"RFC7250 handshakes with unauthenticated servers don't abort as expected","severity":"MEDIUM","score":6.3,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.02531,"kevAdded":null},{"id":"CVE-2024-13176","published":"2025-01-20T13:29:57.047Z","updated":"2026-03-18T16:49:36.429Z","title":"Timing side-channel in ECDSA signature computation","severity":"MEDIUM","score":4.1,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.00609,"kevAdded":null},{"id":"CVE-2024-4741","published":"2024-11-13T10:20:50.711Z","updated":"2025-11-04T17:26:59.261Z","title":"Use After Free with SSL_free_buffers","severity":"HIGH","score":7.5,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.02925,"kevAdded":null},{"id":"CVE-2024-9143","published":"2024-10-16T17:09:23.844Z","updated":"2026-10-15T00:37:50.974Z","title":"Low-level invalid GF(2^m) parameters lead to OOB memory access","severity":"MEDIUM","score":4.3,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.05842,"kevAdded":null},{"id":"CVE-2024-6119","published":"2024-09-03T15:58:06.970Z","updated":"2026-10-15T00:33:30.773Z","title":"Possible denial of service in X.509 name checks","severity":"HIGH","score":7.5,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.66582,"kevAdded":null},{"id":"CVE-2024-5535","published":"2024-06-27T10:30:53.118Z","updated":"2026-10-15T00:29:32.069Z","title":"SSL_select_next_proto buffer overread","severity":"CRITICAL","score":9.1,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.05582,"kevAdded":null},{"id":"CVE-2024-4603","published":"2024-05-16T15:21:20.050Z","updated":"2024-10-14T14:56:01.784Z","title":"Excessive time spent checking DSA keys and parameters","severity":"MEDIUM","score":5.3,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.01131,"kevAdded":null},{"id":"CVE-2023-6237","published":"2024-04-25T06:27:26.990Z","updated":"2026-10-14T22:15:15.166Z","title":"Excessive time spent checking invalid RSA public keys","severity":"MEDIUM","score":5.9,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.02303,"kevAdded":null},{"id":"CVE-2024-2511","published":"2024-04-08T13:51:12.349Z","updated":"2026-10-15T00:25:23.074Z","title":"Unbounded memory growth with session handling in TLSv1.3","severity":"MEDIUM","score":5.9,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.52421,"kevAdded":null},{"id":"CVE-2024-0727","published":"2024-01-26T08:57:19.579Z","updated":"2026-10-15T00:21:17.299Z","title":"PKCS12 Decoding crashes","severity":"MEDIUM","score":5.5,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.03187,"kevAdded":null},{"id":"CVE-2023-6129","published":"2024-01-09T16:36:58.860Z","updated":"2026-10-14T22:11:17.140Z","title":"POLY1305 MAC implementation corrupts vector registers on PowerPC","severity":"MEDIUM","score":6.5,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.02323,"kevAdded":null},{"id":"CVE-2023-5678","published":"2023-11-06T15:47:30.795Z","updated":"2026-10-14T22:03:03.588Z","title":"Excessive time spent in DH check / generation with large Q parameter value","severity":"MEDIUM","score":5.3,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.04459,"kevAdded":null},{"id":"CVE-2023-5363","published":"2023-10-24T15:31:40.890Z","updated":"2026-10-14T21:58:15.012Z","title":"Incorrect cipher key & IV length processing","severity":"HIGH","score":7.5,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.03939,"kevAdded":null},{"id":"CVE-2023-4807","published":"2023-09-08T11:01:53.663Z","updated":"2026-10-14T21:40:59.783Z","title":"POLY1305 MAC implementation corrupts XMM registers on Windows","severity":"HIGH","score":7.8,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.0158,"kevAdded":null},{"id":"CVE-2023-3817","published":"2023-07-31T15:34:13.627Z","updated":"2026-10-14T21:13:47.977Z","title":"Excessive time spent checking DH q parameter value","severity":"MEDIUM","score":5.3,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.03047,"kevAdded":null},{"id":"CVE-2023-3446","published":"2023-07-19T11:31:34.994Z","updated":"2026-10-14T20:55:30.042Z","title":"Excessive time spent checking DH keys and parameters","severity":"MEDIUM","score":5.3,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.06531,"kevAdded":null},{"id":"CVE-2023-2975","published":"2023-07-14T11:16:25.151Z","updated":"2025-04-23T16:20:14.504Z","title":"AES-SIV implementation ignores empty associated data entries","severity":"MEDIUM","score":5.3,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.00617,"kevAdded":null},{"id":"CVE-2023-2650","published":"2023-05-30T13:40:11.963Z","updated":"2026-10-14T20:28:44.585Z","title":"Possible DoS translating ASN.1 object identifiers","severity":"MEDIUM","score":6.5,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.75358,"kevAdded":null},{"id":"CVE-2023-1255","published":"2023-04-20T16:14:54.707Z","updated":"2025-02-13T16:39:19.031Z","title":"Input buffer over-read in AES-XTS implementation on 64 bit ARM","severity":"MEDIUM","score":5.9,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.00953,"kevAdded":null},{"id":"CVE-2023-0466","published":"2023-03-28T14:30:49.595Z","updated":"2026-10-14T20:07:40.980Z","title":"Certificate policy check not enabled","severity":"MEDIUM","score":5.3,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.01772,"kevAdded":null},{"id":"CVE-2023-0465","published":"2023-03-28T14:30:39.707Z","updated":"2026-10-14T19:54:20.864Z","title":"Invalid certificate policies in leaf certificates are silently ignored","severity":"MEDIUM","score":5.3,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.01772,"kevAdded":null},{"id":"CVE-2023-0464","published":"2023-03-22T16:36:47.383Z","updated":"2026-10-14T19:41:20.251Z","title":"Excessive Resource Usage Verifying X.509 Policy Constraints","severity":"HIGH","score":7.5,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.03985,"kevAdded":null},{"id":"CVE-2022-4203","published":"2023-02-24T14:53:08.485Z","updated":"2025-11-04T19:14:06.670Z","title":"X.509 Name Constraints Read Buffer Overflow","severity":"MEDIUM","score":4.9,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.01386,"kevAdded":null},{"id":"CVE-2022-4304","published":"2023-02-08T19:04:28.890Z","updated":"2026-10-14T14:17:49.943Z","title":"Timing Oracle in RSA Decryption","severity":"MEDIUM","score":5.9,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.23509,"kevAdded":null},{"id":"CVE-2022-4450","published":"2023-02-08T19:04:04.874Z","updated":"2026-10-14T14:39:44.108Z","title":"Double free after calling PEM_read_bio_ex","severity":"HIGH","score":7.5,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.2859,"kevAdded":null},{"id":"CVE-2023-0215","published":"2023-02-08T19:03:28.691Z","updated":"2026-10-14T19:02:42.066Z","title":"Use-after-free following BIO_new_NDEF","severity":"HIGH","score":7.5,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.05024,"kevAdded":null},{"id":"CVE-2023-0216","published":"2023-02-08T19:03:05.652Z","updated":"2025-11-04T19:14:34.082Z","title":"Invalid pointer dereference in d2i_PKCS7 functions","severity":"HIGH","score":7.5,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.01846,"kevAdded":null},{"id":"CVE-2023-0217","published":"2023-02-08T19:02:48.524Z","updated":"2025-11-04T19:14:35.179Z","title":"NULL dereference validating DSA public key","severity":"HIGH","score":7.5,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.01846,"kevAdded":null},{"id":"CVE-2023-0286","published":"2023-02-08T19:01:50.514Z","updated":"2026-10-14T19:23:44.227Z","title":"X.400 address type confusion in X.509 GeneralName","severity":"HIGH","score":7.4,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.69286,"kevAdded":null},{"id":"CVE-2023-0401","published":"2023-02-08T19:00:53.435Z","updated":"2025-11-04T19:14:37.338Z","title":"NULL dereference during PKCS7 data verification","severity":"HIGH","score":7.5,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.01846,"kevAdded":null},{"id":"CVE-2022-3996","published":"2022-12-13T15:43:06.821Z","updated":"2024-08-03T01:27:54.475Z","title":"X.509 Policy Constraints Double Locking","severity":"HIGH","score":7.5,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.01312,"kevAdded":null},{"id":"CVE-2022-3786","published":"2022-11-01T00:00:00.000Z","updated":"2026-04-14T08:58:03.787Z","title":"X.509 Email Address Variable Length Buffer Overflow","severity":"HIGH","score":7.5,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.92488,"kevAdded":null},{"id":"CVE-2022-3602","published":"2022-11-01T00:00:00.000Z","updated":"2026-04-14T08:58:02.339Z","title":"X.509 Email Address 4-byte Buffer Overflow","severity":"HIGH","score":7.5,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.9077,"kevAdded":null},{"id":"CVE-2022-3358","published":"2022-10-11T15:00:14.123Z","updated":"2024-09-16T16:33:30.640Z","title":"Using a Custom Cipher with NID_undef may lead to NULL encryption","severity":"HIGH","score":7.5,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.0401,"kevAdded":null},{"id":"CVE-2022-2097","published":"2022-07-05T10:30:13.658Z","updated":"2026-10-14T13:07:00.762Z","title":"AES OCB fails to encrypt some bytes","severity":"MEDIUM","score":5.3,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.04899,"kevAdded":null},{"id":"CVE-2022-2274","published":"2022-07-01T07:30:17.282Z","updated":"2026-10-14T13:07:03.764Z","title":"RSA implementation bug in AVX512IFMA instructions","severity":"CRITICAL","score":9.8,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.48234,"kevAdded":null},{"id":"CVE-2022-2068","published":"2022-06-21T14:45:20.597Z","updated":"2026-11-04T00:22:37.747Z","title":"The c_rehash script allows command injection","severity":"CRITICAL","score":9.8,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.96391,"kevAdded":null},{"id":"CVE-2022-1473","published":"2022-05-03T15:15:25.051Z","updated":"2026-10-14T12:48:33.841Z","title":"Resource leakage when decoding certificates and keys","severity":"HIGH","score":7.5,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.04678,"kevAdded":null},{"id":"CVE-2022-1434","published":"2022-05-03T15:15:23.387Z","updated":"2026-10-14T12:43:59.638Z","title":"Incorrect MAC key used in the RC4-MD5 ciphersuite","severity":"MEDIUM","score":5.9,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.01228,"kevAdded":null},{"id":"CVE-2022-1343","published":"2022-05-03T15:15:21.496Z","updated":"2026-10-14T12:43:58.077Z","title":"OCSP_basic_verify may incorrectly verify the response signing certificate","severity":"MEDIUM","score":5.3,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.02141,"kevAdded":null},{"id":"CVE-2022-1292","published":"2022-05-03T15:15:19.758Z","updated":"2026-11-04T00:21:28.165Z","title":"The c_rehash script allows command injection","severity":"CRITICAL","score":9.8,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.82612,"kevAdded":null},{"id":"CVE-2022-0778","published":"2022-03-15T17:05:20.382Z","updated":"2026-10-14T12:12:36.346Z","title":"Infinite loop in BN_mod_sqrt() reachable when parsing certificates","severity":"HIGH","score":7.5,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.73188,"kevAdded":null},{"id":"CVE-2021-4160","published":"2022-01-28T21:28:41.076Z","updated":"2024-09-16T23:51:52.869Z","title":"BN_mod_exp may produce incorrect results on MIPS","severity":"MEDIUM","score":5.9,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.03772,"kevAdded":null},{"id":"CVE-2021-4044","published":"2021-12-14T18:40:11.901Z","updated":"2024-09-17T03:17:39.603Z","title":"Invalid handling of X509_verify_cert() internal errors in libssl","severity":"HIGH","score":7.5,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.50099,"kevAdded":null},{"id":"CVE-2021-3712","published":"2021-08-24T14:50:14.704Z","updated":"2026-04-16T14:11:16.454Z","title":"Read buffer overruns processing ASN.1 strings","severity":"HIGH","score":7.4,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.48084,"kevAdded":null},{"id":"CVE-2021-3711","published":"2021-08-24T14:50:13.114Z","updated":"2026-10-08T21:03:25.800Z","title":"SM2 Decryption Buffer Overflow","severity":"CRITICAL","score":9.8,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.87816,"kevAdded":null},{"id":"CVE-2021-3450","published":"2021-03-25T14:25:14.287Z","updated":"2026-10-08T21:03:32.498Z","title":"CA certificate check bypass with X509_V_FLAG_X509_STRICT","severity":"HIGH","score":7.4,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.18339,"kevAdded":null},{"id":"CVE-2021-3449","published":"2021-03-25T14:25:13.659Z","updated":"2026-10-08T21:13:50.095Z","title":"NULL pointer deref in signature_algorithms processing","severity":"MEDIUM","score":5.9,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.63542,"kevAdded":null},{"id":"CVE-2021-23841","published":"2021-02-16T16:55:18.817Z","updated":"2024-09-16T22:39:57.576Z","title":"Null pointer deref in X509_issuer_and_serial_hash()","severity":"MEDIUM","score":5.9,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.0741,"kevAdded":null},{"id":"CVE-2021-23840","published":"2021-02-16T16:55:18.192Z","updated":"2026-04-16T14:12:36.721Z","title":"Integer overflow in CipherUpdate","severity":"HIGH","score":7.5,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.50732,"kevAdded":null},{"id":"CVE-2021-23839","published":"2021-02-16T16:55:17.519Z","updated":"2024-09-17T03:59:18.791Z","title":"Incorrect SSLv2 rollback protection","severity":"LOW","score":3.7,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.02961,"kevAdded":null},{"id":"CVE-2020-1971","published":"2020-12-08T15:30:16.835Z","updated":"2026-05-29T15:40:28.488Z","title":"EDIPARTYNAME NULL pointer dereference","severity":"MEDIUM","score":5.9,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.06994,"kevAdded":null},{"id":"CVE-2020-1968","published":"2020-09-09T13:50:12.423Z","updated":"2026-04-16T14:10:35.131Z","title":"Raccoon attack","severity":"LOW","score":3.7,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.04903,"kevAdded":null},{"id":"CVE-2020-1967","published":"2020-04-21T13:45:15.136Z","updated":"2026-10-08T21:03:24.490Z","title":"Segmentation fault in SSL_check_chain","severity":"HIGH","score":7.5,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.53336,"kevAdded":null},{"id":"CVE-2019-1551","published":"2019-12-06T17:20:14.842Z","updated":"2026-10-08T21:13:47.667Z","title":"rsaz_512_sqr overflow bug on x86_64","severity":"MEDIUM","score":5.3,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.14298,"kevAdded":null},{"id":"CVE-2011-4121","published":"2019-11-26T04:35:56.000Z","updated":"2024-08-07T00:01:50.387Z","title":"The OpenSSL extension of Ruby (Git trunk) versions after 2011-09-01 up to 2011-11-03 always generated an exponent value of '1' to be used for private RSA key…","severity":"CRITICAL","score":9.8,"vendor":"OpenSSL","product":"OpenSSL extension of Ruby (Git trunk)","kev":false,"epss":0.02529,"kevAdded":null},{"id":"CVE-2019-1563","published":"2019-09-10T16:58:35.407Z","updated":"2026-10-08T21:13:59.896Z","title":"Padding Oracle in PKCS7_dataDecode and CMS_decrypt_set1_pkey","severity":"LOW","score":3.7,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.03838,"kevAdded":null},{"id":"CVE-2019-1549","published":"2019-09-10T16:58:35.361Z","updated":"2024-09-16T22:56:57.501Z","title":"Fork Protection","severity":"MEDIUM","score":5.3,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.06182,"kevAdded":null},{"id":"CVE-2019-1547","published":"2019-09-10T16:58:35.307Z","updated":"2024-09-16T16:33:05.874Z","title":"ECDSA remote timing attack","severity":"MEDIUM","score":4.7,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.01173,"kevAdded":null},{"id":"CVE-2019-1552","published":"2019-07-30T16:29:24.093Z","updated":"2026-11-02T17:46:44.615Z","title":"Windows builds with insecure path defaults","severity":"LOW","score":3.3,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.00695,"kevAdded":null},{"id":"CVE-2019-1543","published":"2019-03-06T21:00:00.000Z","updated":"2026-11-02T17:46:01.231Z","title":"ChaCha20-Poly1305 with long nonces","severity":"HIGH","score":7.4,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.05701,"kevAdded":null},{"id":"CVE-2019-1559","published":"2019-02-27T23:00:00.000Z","updated":"2024-09-17T04:20:35.057Z","title":"0-byte record padding oracle","severity":"MEDIUM","score":5.9,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.17139,"kevAdded":null},{"id":"CVE-2018-0734","published":"2018-10-30T12:00:00.000Z","updated":"2026-10-08T21:13:44.081Z","title":"Timing attack against DSA","severity":"MEDIUM","score":5.9,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.12154,"kevAdded":null},{"id":"CVE-2018-0735","published":"2018-10-29T13:00:00.000Z","updated":"2026-10-08T21:13:55.113Z","title":"Timing attack against ECDSA signature generation","severity":"MEDIUM","score":5.9,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.04724,"kevAdded":null},{"id":"CVE-2018-0732","published":"2018-06-12T13:00:00.000Z","updated":"2026-10-08T21:13:55.704Z","title":"Client DoS due to large DH parameter","severity":"HIGH","score":7.5,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.4701,"kevAdded":null},{"id":"CVE-2018-0737","published":"2018-04-16T17:00:00.000Z","updated":"2026-10-15T17:19:17.232Z","title":"Cache timing vulnerability in RSA Key Generation","severity":"MEDIUM","score":5.9,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.11597,"kevAdded":null},{"id":"CVE-2018-0739","published":"2018-03-27T21:00:00.000Z","updated":"2024-09-16T22:35:29.998Z","title":"Constructed ASN.1 types with a recursive definition could exceed the stack","severity":"MEDIUM","score":6.5,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.18596,"kevAdded":null},{"id":"CVE-2018-0733","published":"2018-03-27T21:00:00.000Z","updated":"2024-09-16T20:46:46.842Z","title":"Incorrect CRYPTO_memcmp on HP-UX PA-RISC","severity":"MEDIUM","score":5.9,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.08281,"kevAdded":null},{"id":"CVE-2016-8610","published":"2017-11-13T22:00:00.000Z","updated":"2024-08-06T02:27:40.949Z","title":"A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL protocol defined processing of ALERT packets…","severity":"HIGH","score":7.5,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.39919,"kevAdded":null},{"id":"CVE-2017-3733","published":"2017-05-04T19:00:00.000Z","updated":"2024-09-16T16:18:03.381Z","title":"Encrypt-Then-Mac renegotiation crash","severity":"HIGH","score":7.5,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.12874,"kevAdded":null},{"id":"CVE-2017-3732","published":"2017-05-04T19:00:00.000Z","updated":"2024-09-16T22:08:37.371Z","title":"BN_mod_exp may produce incorrect results on x86_64","severity":"MEDIUM","score":5.9,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.154,"kevAdded":null},{"id":"CVE-2017-3731","published":"2017-05-04T19:00:00.000Z","updated":"2024-09-16T22:40:54.865Z","title":"Truncated packet could crash via OOB read","severity":"HIGH","score":7.5,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.57322,"kevAdded":null},{"id":"CVE-2017-3730","published":"2017-05-04T19:00:00.000Z","updated":"2024-09-16T17:48:53.722Z","title":"Bad (EC)DHE parameters cause a client crash","severity":"HIGH","score":7.5,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.55294,"kevAdded":null},{"id":"CVE-2016-7054","published":"2017-05-04T19:00:00.000Z","updated":"2024-09-17T00:30:27.920Z","title":"ChaCha20/Poly1305 heap-buffer-overflow","severity":"HIGH","score":7.5,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.32389,"kevAdded":null},{"id":"CVE-2016-7053","published":"2017-05-04T19:00:00.000Z","updated":"2024-09-16T20:52:38.446Z","title":"CMS Null dereference","severity":"HIGH","score":7.5,"vendor":"OpenSSL","product":"OpenSSL","kev":false,"epss":0.21682,"kevAdded":null}]}