Read the docs

OpenVPN

Records100All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical11CVSS 9.0–10.0
CVSS high38CVSS 7.0–8.9

Exploited now

OpenVPN records in CISA KEV

No OpenVPN vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Openvpn 49 records MEDIUM Openvpn Access Server 21 records MEDIUM Connect 8 records MEDIUM Ovpn-dco-win 3 records LOW Easy-rsa 1 record LOW Openvpn3linux 1 record LOW Openvpn 3 1 record LOW Openvpn Gui 1 record LOW

Records

3 records in Ovpn-dco-win · all components

TI-2026-10019 CVE-2026-11604 · GHSA-f6c5-28vq-94w2

Heap-based buffer overflow in OpenVPN ovpn-dco-win

Priority LOW 25

An incorrect buffer size calculation in the epoch key generator in OpenVPN ovpn-dco-win version 2.0.0 through 2.8.3 allows a remote authenticated peer to trigger a heap-based buffer overflow and kernel memory corruption…

CVSS 4.0MEDIUM 5.6 Local Low privileges User interaction EPSS 0.00338 Published 2026-06-10 No fix listed CWE-122
TI-2025-31967 CVE-2025-50054 · GHSA-c5v3-f4mm-7xmw

Heap-based buffer overflow in OpenVPN ovpn-dco-win

Priority LOW 24

Buffer overflow in OpenVPN ovpn-dco-win version 1.3.0 and earlier and version 2.5.8 and earlier allows a local user process to send a too large control message buffer to the kernel driver resulting in a system crash

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00246 Published 2025-06-20 Fixed in 1.3.1, 2.5.9 CWE-122
TI-2024-04824 CVE-2024-5198 · GHSA-cp7w-whjm-pp36

NULL pointer dereference in OpenVPN ovpn-dco

Priority LOW 15

OpenVPN ovpn-dco for Windows version 1.1.1 allows an unprivileged local attacker to send I/O control messages with invalid data to the driver resulting in a NULL pointer dereference leading to a system halt.

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.0014 Published 2025-01-15 No fix listed CWE-476
Open these records in search →