CVE Program partner

OpenVPN

OpenVPN Inc.

API
CVEs, 365 days3469 all time, 1 rejected
Quality97%median 99%
CVSS by the CNA91%share of records
CWE100%share of records
Affected versions100%not n/a or unspecified
CVSS added by CISA8%lower is better
OrganisationOpenVPN Inc.
RoleCNA
TypeVendor, Open Source
Reports tomitre
ScopeAll products and projects in which OpenVPN is directly involved commercially and for OpenVPN community projects, including Private Tunnel.
Advisorieshttps://openvpn.net/security-advisories/

Latest CVEs · RSS

  • CVE-2026-84471 2026-10-14 · CVSS 7.2
    The fix for CVE-2026-12996 was incomplete. A use-after-free in OpenVPN 2.6.0 through 2.6.22 and 2.7_alpha1 through 2.7.7 allows remote authenticated peers to po
  • CVE-2026-105390 2026-10-13 · CVSS 6.9
    Improper synchronization in the OpenVPN ovpn-dco-win for Windows versions 0.6.5 through 1.3.5 and 2.4.0 through 2.8.7 allows local attackers to trigger a deadlo
  • CVE-2026-88964 2026-10-13 · CVSS 7.1
    An integer underflow in OpenVPN version 2.7_alpha3 through 2.7.7 on Windows and Android allows remote authenticated servers to cause a denial of service or memo
  • CVE-2026-84790 2026-10-13 · CVSS 7.6
    OpenVPN 2.7_alpha1 through 2.7.7 allows remote authenticated users to impersonate others via a crafted certificate subject field
  • CVE-2026-82325 2026-09-07 · CVSS 6.8
    A use-after-free vulnerability in the OpenVPN ovpn-dco-win driver version 2.5.0 through 2.8.6 allows local authenticated users to cause a system crash via craft
  • CVE-2026-84732 2026-09-07 · CVSS 8.7
    Retransmissions of ACK packet ID in OpenVPN through 2.6.22 and 2.7.6 allow remote unauthenticated attackers to cause a denial of service via crafted inputs that
  • CVE-2026-84256 2026-09-07 · CVSS 7.7
    An argument parsing issue in OpenVPN 2.1_rc10 through 2.6.22 and 2.7_alpha1 through 2.7.7 on Windows allows remote authenticated users to execute arbitrary comm
  • CVE-2026-84226 2026-09-07 · CVSS 8.5
    OpenVPN version 2.5.0 through 2.6.22 and 2.7_alpha1 through 2.7.6 on Windows allows local authenticated users to perform a binary planting attack during network
  • CVE-2026-82312 2026-09-07 · CVSS 1.8
    OpenVPN 2.0.0 through 2.6.22 and 2.7_alpha1 through 2.7.6 on Windows allows local authenticated users to cause a denial of service via a NULL DACL on named IPC
  • CVE-2026-81830 2026-09-07 · CVSS 5.6
    The Windows interactive service in OpenVPN 2.4.0 through 2.6.22 allows local authenticated users to bypass the trusted configuration directory constraint via in
  • CVE-2026-81738 2026-09-07 · CVSS 2.3
    OpenVPN 2.5.0 through 2.7.6 on Windows using the tap-windows6 driver allows attackers to trigger an out-of-bounds write via crafted DOMAIN-SEARCH entries
  • CVE-2026-78221 2026-09-07 · CVSS 5.9
    An incorrect buffer size calculation in the Windows Interactive Service in OpenVPN 2.7_alpha1 through 2.7.6 allows local authenticated users to cause memory cor
  • CVE-2026-78043 2026-09-07 · CVSS 5.6
    The Windows Interactive Service in OpenVPN 2.7_alpha1 through 2.7.6 allows local authenticated users to bypass the trusted configuration directory constraint an
  • CVE-2026-63650 2026-08-14 · CVSS 2.0
    OpenVPN 2.7_alpha1 through 2.7.5 using mbedTLS allows remote authenticated users to be misidentified by ignoring the configured X.509 username identity lookup f
  • CVE-2026-63649 2026-08-14 · CVSS 4.1
    The Windows interactive service in OpenVPN 2.4.0 through 2.6.21 and 2.7_alpha1 through 2.7.5 allows local authenticated users to bypass the trusted configuratio
  • CVE-2026-12932 2026-07-30 · CVSS 7.1
    A memory leak in the tls-crypt-v2 client key extraction in OpenVPN 2.5.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote attackers to cause a denial o
  • CVE-2026-12996 2026-07-30 · CVSS 6.0
    A use-after-free in OpenVPN 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote authenticated peers to potentially cause a denial of service or leak
  • CVE-2026-11771 2026-07-30 · CVSS 7.0
    OpenVPN version 2.1.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows attackers via an off-by-one buffer write in the NTLM proxy authentication to potentiall
  • CVE-2026-13117 2026-07-30 · CVSS 6.0
    An incomplete guard in OpenVPN 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote authenticated peers to trigger a use-after-free during TLS sessio
  • CVE-2026-13379 2026-07-30 · CVSS 5.1
    The Windows interactive service in OpenVPN 2.7_alpha1 through 2.7.4 allows remote attackers to cause persistent DNS state pollution or a service crash via a cra
  • CVE-2025-3110 2026-07-08 · CVSS 6.9
    OpenVPN Access Server 2.7.2 through 3.1.0 accepts bare line-feed sequences inside HTTP header values, allowing remote attackers to perform HTTP request smugglin
  • CVE-2026-13122 2026-07-06 · CVSS 5.9
    OpenVPN version 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote attackers to cause a denial of service via a malformed authentication token that
  • CVE-2026-13698 2026-07-06 · CVSS 6.0
    A memory leak in OpenVPN version 2.5.0 through 2.5.11, 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote attackers with a valid tls-crypt-v2 clien
  • CVE-2026-11604 2026-06-10 · CVSS 5.6
    An incorrect buffer size calculation in the epoch key generator in OpenVPN ovpn-dco-win version 2.0.0 through 2.8.3 allows a remote authenticated peer to trigge
  • CVE-2026-40215 2026-06-08 · CVSS 6.1
    A race condition in OpenVPN 2.6.0 through 2.6.19 and 2.7_alpha1 through 2.7.1 allows remote attackers to potentially cause a server crash or leak heap memory vi

All CVE Program partners