Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

7 records

Advisory: OpenSSL — openssl-library.org/news/secadv/20260407.txt Clear all filters
TI-2026-24346 CVE-2026-31790 · GHSA-vgxx-5xj5-q97x

Incorrect Failure Handling in RSA KEM RSASVE Encapsulation

Priority MEDIUM 41

Issue summary: Applications using RSASVE key encapsulation to establish a secret encryption key can send contents of an uninitialized memory buffer to a malicious peer.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01049 Published 2026-04-07 Partial fix · 3.6.2, 3.5.6 +3 CWE-754
TI-2026-24345 CVE-2026-31789 · GHSA-j79m-9jxq-788r

Heap Buffer Overflow in Hexadecimal Conversion

Priority MEDIUM 42

Issue summary: Converting an excessively large OCTET STRING value to a hexadecimal string leads to a heap buffer overflow on 32 bit platforms.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00253 Published 2026-04-07 Partial fix · 3.6.2, 3.5.6 +3 CWE-787
TI-2026-22664 CVE-2026-28389 · GHSA-7x88-9hgc-69gf

Possible NULL Dereference When Processing CMS KeyAgreeRecipientInfo

Priority MEDIUM 40

Issue summary: During processing of a crafted CMS EnvelopedData message with KeyAgreeRecipientInfo a NULL pointer dereference can happen.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00836 Published 2026-04-07 Partial fix · 3.6.2, 3.5.6 +5 CWE-476
TI-2026-22663 CVE-2026-28388 · GHSA-rpg5-467j-c25q

NULL Pointer Dereference When Processing a Delta CRL

Priority MEDIUM 41

Issue summary: When a delta CRL that contains a Delta CRL Indicator extension is processed a NULL pointer dereference might happen if the required CRL Number extension is missing.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00919 Published 2026-04-07 Partial fix · 3.6.2, 3.5.6 +5 CWE-476
TI-2026-22662 CVE-2026-28387 · GHSA-h2cc-wx97-xp8v

Potential Use-after-free in DANE Client Code

Priority LOW 38

Issue summary: An uncommon configuration of clients performing DANE TLSA-based server authentication, when paired with uncommon server DANE TLSA records, may result in a use-after-free and/or double-free on the client si…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00697 Published 2026-04-07 Partial fix · 3.6.2, 3.5.6 +4 CWE-416
TI-2026-22661 CVE-2026-28386 · GHSA-q457-vx59-3fqg

Out-of-bounds Read in AES-CFB-128 on X86-64 with AVX-512 Support

Priority MEDIUM 46

Issue summary: Applications using AES-CFB128 encryption or decryption on systems with AVX-512 and VAES support can trigger an out-of-bounds read of up to 15 bytes when processing partial cipher blocks.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00516 Published 2026-04-07 Partial fix · 3.6.2 CWE-125