| mingw64-x86_64-openssl |
conf-mingw-w64-openssl-x86_64.1
|
OpenSSL
|
High
|
CVE-2026-9076
- Out-of-Bounds Read in CMS Password-Based Decryption
|
6/9/2026 |
| mingw64-x86_64-openssl |
conf-mingw-w64-openssl-x86_64.1
|
OpenSSL
|
High
|
CVE-2026-84784
- QUIC: Unbounded RETIRE_CONNECTION_ID Backlog
|
9/29/2026 |
| mingw64-x86_64-openssl |
conf-mingw-w64-openssl-x86_64.1
|
OpenSSL
|
High
|
CVE-2026-84783
- Use-After-Free in X.509 Extension Cache Under Concurrent Use
|
9/29/2026 |
| mingw64-x86_64-openssl |
conf-mingw-w64-openssl-x86_64.1
|
OpenSSL
|
High
|
CVE-2026-84782
- DTLS Retransmits Handshake Messages From a Stale Buffer Offset
|
9/29/2026 |
| mingw64-x86_64-openssl |
conf-mingw-w64-openssl-x86_64.1
|
OpenSSL
|
Low
|
CVE-2026-77696
- Timing Side-Channel in SM2 Signature Generation
|
9/29/2026 |
| mingw64-x86_64-openssl |
conf-mingw-w64-openssl-x86_64.1
|
OpenSSL
|
Medium
|
CVE-2026-75806
- Unauthenticated and Undersized DTLS 1.2 AEAD Record Causes DoS
|
9/29/2026 |
| mingw64-x86_64-openssl |
conf-mingw-w64-openssl-x86_64.1
|
OpenSSL
|
Medium
|
CVE-2026-75805
- NULL Pointer Dereference in CMP Client Revocation Response Handling
|
9/29/2026 |
| mingw64-x86_64-openssl |
conf-mingw-w64-openssl-x86_64.1
|
OpenSSL
|
Medium
|
CVE-2026-75804
- QUIC Connection-Level Flow Control is Not Enforced for Streams
|
9/29/2026 |
| mingw64-x86_64-openssl |
conf-mingw-w64-openssl-x86_64.1
|
OpenSSL
|
Critical
|
CVE-2026-75803
- AEAD Forgeries with Empty Ciphertext When Using EVP_Cipher()
|
8/25/2026 |
| mingw64-x86_64-openssl |
conf-mingw-w64-openssl-x86_64.1
|
OpenSSL
|
High
|
CVE-2026-7383
- Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion
|
6/9/2026 |
| mingw64-x86_64-openssl |
conf-mingw-w64-openssl-x86_64.1
|
OpenSSL
|
High
|
CVE-2026-72897
- Out-of-Bounds Access After SSL_set_SSL_CTX() During a Handshake
|
9/29/2026 |
| mingw64-x86_64-openssl |
conf-mingw-w64-openssl-x86_64.1
|
OpenSSL
|
High
|
CVE-2026-63076
- Invalid Pointer Dereference in CMP Server via Crafted protectionAlg
|
8/25/2026 |
| mingw64-x86_64-openssl |
conf-mingw-w64-openssl-x86_64.1
|
OpenSSL
|
High
|
CVE-2026-63075
- QUIC ACK-only Packet Retention Can Cause Memory Exhaustion
|
8/25/2026 |
| mingw64-x86_64-openssl |
conf-mingw-w64-openssl-x86_64.1
|
OpenSSL
|
Medium
|
CVE-2026-63074
- CMP Indefinite Cache Growth of ExtraCerts
|
8/25/2026 |
| mingw64-x86_64-openssl |
conf-mingw-w64-openssl-x86_64.1
|
OpenSSL
|
Critical
|
CVE-2026-63073
- Untrusted Sender DN Used as Format String in CMP Response Validation
|
8/25/2026 |
| mingw64-x86_64-openssl |
conf-mingw-w64-openssl-x86_64.1
|
OpenSSL
|
High
|
CVE-2026-63072
- Heap Buffer Overflow in CMS Key Unwrapping
|
8/25/2026 |
| mingw64-x86_64-openssl |
conf-mingw-w64-openssl-x86_64.1
|
OpenSSL
|
Low
|
CVE-2026-54875
- Non-Constant-Time SM2 Scalar Multiplication on ARM64 and RISC-V
|
9/29/2026 |
| mingw64-x86_64-openssl |
conf-mingw-w64-openssl-x86_64.1
|
OpenSSL
|
High
|
CVE-2026-54874
- Excessive Memory Use Buffering DTLS Records for a Future Epoch
|
8/25/2026 |
| mingw64-x86_64-openssl |
conf-mingw-w64-openssl-x86_64.1
|
OpenSSL
|
High
|
CVE-2026-54873
- QUIC STREAM Fragment Metadata DoS
|
9/29/2026 |
| mingw64-x86_64-openssl |
conf-mingw-w64-openssl-x86_64.1
|
OpenSSL
|
Low
|
CVE-2026-54872
- Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves
|
9/29/2026 |