| mingw64-x86_64-openssl |
conf-mingw-w64-openssl-x86_64.1
|
OpenSSL
|
High
|
CVE-2026-31790
- Incorrect Failure Handling in RSA KEM RSASVE Encapsulation
|
4/7/2026 |
| mingw64-x86_64-openssl |
conf-mingw-w64-openssl-x86_64.1
|
OpenSSL
|
Unknown
|
CVE-2026-31789
- Heap Buffer Overflow in Hexadecimal Conversion
|
4/7/2026 |
| mingw64-x86_64-openssl |
conf-mingw-w64-openssl-x86_64.1
|
OpenSSL
|
High
|
CVE-2026-28390
- Possible NULL Dereference When Processing CMS KeyTransportRecipientInfo
|
4/7/2026 |
| mingw64-x86_64-openssl |
conf-mingw-w64-openssl-x86_64.1
|
OpenSSL
|
High
|
CVE-2026-28389
- Possible NULL Dereference When Processing CMS KeyAgreeRecipientInfo
|
4/7/2026 |
| mingw64-x86_64-openssl |
conf-mingw-w64-openssl-x86_64.1
|
OpenSSL
|
High
|
CVE-2026-28388
- NULL Pointer Dereference When Processing a Delta CRL
|
4/7/2026 |
| mingw64-x86_64-openssl |
conf-mingw-w64-openssl-x86_64.1
|
OpenSSL
|
Unknown
|
CVE-2026-28387
- Potential Use-after-free in DANE Client Code
|
4/7/2026 |
| mingw64-x86_64-openssl |
conf-mingw-w64-openssl-x86_64.1
|
OpenSSL
|
Critical
|
CVE-2026-28386
- Out-of-bounds Read in AES-CFB-128 on X86-64 with AVX-512 Support
|
4/7/2026 |
| mingw64-x86_64-openssl |
conf-mingw-w64-openssl-x86_64.1
|
OpenSSL
|
Medium
|
CVE-2026-22796
- ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function
|
1/27/2026 |
| mingw64-x86_64-openssl |
conf-mingw-w64-openssl-x86_64.1
|
OpenSSL
|
Medium
|
CVE-2026-22795
- Missing ASN1_TYPE validation in PKCS#12 parsing
|
1/27/2026 |
| mingw64-x86_64-openssl |
conf-mingw-w64-openssl-x86_64.1
|
OpenSSL
|
High
|
CVE-2025-69421
- NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function
|
1/27/2026 |
| mingw64-x86_64-openssl |
conf-mingw-w64-openssl-x86_64.1
|
OpenSSL
|
High
|
CVE-2025-69420
- Missing ASN1_TYPE validation in TS_RESP_verify_response() function
|
1/27/2026 |
| mingw64-x86_64-openssl |
conf-mingw-w64-openssl-x86_64.1
|
OpenSSL
|
High
|
CVE-2025-69419
- Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion
|
1/27/2026 |
| mingw64-x86_64-openssl |
conf-mingw-w64-openssl-x86_64.1
|
OpenSSL
|
Medium
|
CVE-2025-69418
- Unauthenticated/unencrypted trailing bytes with low-level OCB function calls
|
1/27/2026 |
| mingw64-x86_64-openssl |
conf-mingw-w64-openssl-x86_64.1
|
OpenSSL
|
Medium
|
CVE-2025-68160
- Heap out-of-bounds write in BIO_f_linebuffer on short writes
|
1/27/2026 |
| mingw64-x86_64-openssl |
conf-mingw-w64-openssl-x86_64.1
|
OpenSSL
|
Medium
|
CVE-2025-66199
- TLS 1.3 CompressedCertificate excessive memory allocation
|
1/27/2026 |
| mingw64-x86_64-openssl |
conf-mingw-w64-openssl-x86_64.1
|
OpenSSL
|
Medium
|
CVE-2025-4575
- The x509 application adds trusted use instead of rejected use
|
5/22/2025 |
| mingw64-x86_64-openssl |
conf-mingw-w64-openssl-x86_64.1
|
OpenSSL
|
Medium
|
CVE-2025-15469
- 'openssl dgst' one-shot codepath silently truncates inputs >16MB
|
1/27/2026 |
| mingw64-x86_64-openssl |
conf-mingw-w64-openssl-x86_64.1
|
OpenSSL
|
Medium
|
CVE-2025-15468
- NULL dereference in SSL_CIPHER_find() function on unknown cipher ID
|
1/27/2026 |
| mingw64-x86_64-openssl |
conf-mingw-w64-openssl-x86_64.1
|
OpenSSL
|
High
|
CVE-2025-15467
- Stack buffer overflow in CMS (Auth)EnvelopedData parsing
|
1/27/2026 |
| mingw64-x86_64-openssl |
conf-mingw-w64-openssl-x86_64.1
|
OpenSSL
|
Medium
|
CVE-2025-11187
- Improper validation of PBMAC1 parameters in PKCS#12 MAC verification
|
1/27/2026 |