O
Vendor security profile1 actively exploited CVEs
openssl
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs64
Critical5
CISA KEV1
Public exploit5
Patch rate%98
Avg. CVSS6.7
12-month vulnerability rate
0
0
1
0
0
7
0
18
1
11
14
0
CVE KEV
CVE severity distribution
64toplam CVE
Critical5 (8%)
High33 (52%)
Medium18 (28%)
Low8 (13%)
Patch and exploitation view
%98
Verified patch
%2
CISA KEV
%8
Public exploit
62Patch available
1Partial
0Workaround
0Vendor: no patch
1Unknown
Latest vulnerabilities
7.5
CVE-2026-84784
QUIC: Unbounded RETIRE_CONNECTION_ID Backlog
O
Patch verifiedEPSS %0
7.5
CVE-2026-84783
Use-After-Free in X.509 Extension Cache Under Concurrent Use
O
Patch verifiedEPSS %0
8.2
CVE-2026-84782
DTLS Retransmits Handshake Messages From a Stale Buffer Offset
O
Patch verifiedEPSS %0
3.7
CVE-2026-77696
Timing Side-Channel in SM2 Signature Generation
O
Patch verifiedEPSS %0
5.3
CVE-2026-75806
Unauthenticated and Undersized DTLS 1.2 AEAD Record Causes DoS
O
Patch verifiedEPSS %0
5.3
CVE-2026-75805
NULL Pointer Dereference in CMP Client Revocation Response Handling
O
Patch verifiedEPSS %0
5.3
CVE-2026-75804
QUIC Connection-Level Flow Control is Not Enforced for Streams
O
Patch verifiedEPSS %0
7.5
CVE-2026-72897
Out-of-Bounds Access After SSL_set_SSL_CTX() During a Handshake
O
Patch verifiedEPSS %0
3.7
CVE-2026-54875
Non-Constant-Time SM2 Scalar Multiplication on ARM64 and RISC-V
O
Patch verifiedEPSS %0
7.5
CVE-2026-54873
QUIC STREAM Fragment Metadata DoS
O
Patch verifiedEPSS %0