{"version":"https://jsonfeed.org/version/1.1","title":"Patchfirst: OpenSSL vulnerabilities","home_page_url":"https://patchfirst.co/vendor/openssl/","feed_url":"https://patchfirst.co/feed/vendor/openssl.json","description":"New and newly exploited OpenSSL CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.","language":"en-GB","items":[{"id":"CVE-2025-15467","url":"https://patchfirst.co/cve/CVE-2025-15467/","title":"CVE-2025-15467: Stack buffer overflow in CMS (Auth)EnvelopedData parsing","content_text":"OpenSSL · OpenSSL. Not in CISA KEV. EPSS 74.8% (higher than 99.5% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. Priority 32.4 of 100.","summary":"Stack buffer overflow in CMS (Auth)EnvelopedData parsing","date_published":"2026-01-27T00:00:00.000Z","date_modified":"2026-10-15T01:02:38.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":32.4,"kev":null,"epss":{"score":0.74793,"percentile":0.99504},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"OpenSSL","product":"OpenSSL","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2024-6119","url":"https://patchfirst.co/cve/CVE-2024-6119/","title":"CVE-2024-6119: Possible denial of service in X.509 name checks","content_text":"OpenSSL · OpenSSL. Not in CISA KEV. EPSS 66.6% (higher than 99.28% of CVEs). CVSS 7.5 HIGH. Priority 26.2 of 100.","summary":"Possible denial of service in X.509 name checks","date_published":"2024-09-03T00:00:00.000Z","date_modified":"2026-10-15T00:33:30.000Z","tags":[],"_patchfirst":{"reason":"published","priority":26.2,"kev":null,"epss":{"score":0.66582,"percentile":0.99285},"cvss":{"score":7.5,"severity":"HIGH","version":"3.1"},"vendor":"OpenSSL","product":"OpenSSL","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2023-2650","url":"https://patchfirst.co/cve/CVE-2023-2650/","title":"CVE-2023-2650: Possible DoS translating ASN.1 object identifiers","content_text":"OpenSSL · OpenSSL. Not in CISA KEV. EPSS 75.4% (higher than 99.51% of CVEs). CVSS 6.5 MEDIUM. Priority 26.2 of 100.","summary":"Possible DoS translating ASN.1 object identifiers","date_published":"2023-05-30T00:00:00.000Z","date_modified":"2026-10-14T20:28:44.000Z","tags":[],"_patchfirst":{"reason":"published","priority":26.2,"kev":null,"epss":{"score":0.75358,"percentile":0.99514},"cvss":{"score":6.5,"severity":"MEDIUM","version":"3.1"},"vendor":"OpenSSL","product":"OpenSSL","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2023-0286","url":"https://patchfirst.co/cve/CVE-2023-0286/","title":"CVE-2023-0286: X.400 address type confusion in X.509 GeneralName","content_text":"OpenSSL · OpenSSL. Not in CISA KEV. EPSS 69.3% (higher than 99.36% of CVEs). CVSS 7.4 HIGH. Priority 28.1 of 100.","summary":"X.400 address type confusion in X.509 GeneralName","date_published":"2023-02-08T00:00:00.000Z","date_modified":"2026-10-14T19:23:44.000Z","tags":[],"_patchfirst":{"reason":"published","priority":28.1,"kev":null,"epss":{"score":0.69286,"percentile":0.99357},"cvss":{"score":7.4,"severity":"HIGH","version":"3.1"},"vendor":"OpenSSL","product":"OpenSSL","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2022-3786","url":"https://patchfirst.co/cve/CVE-2022-3786/","title":"CVE-2022-3786: X.509 Email Address Variable Length Buffer Overflow","content_text":"OpenSSL · OpenSSL. Not in CISA KEV. EPSS 92.5% (higher than 99.83% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. Priority 33.2 of 100.","summary":"X.509 Email Address Variable Length Buffer Overflow","date_published":"2022-11-01T00:00:00.000Z","date_modified":"2026-04-14T08:58:03.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":33.2,"kev":null,"epss":{"score":0.92488,"percentile":0.99825},"cvss":{"score":7.5,"severity":"HIGH","version":"3.1"},"vendor":"OpenSSL","product":"OpenSSL","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2022-3602","url":"https://patchfirst.co/cve/CVE-2022-3602/","title":"CVE-2022-3602: X.509 Email Address 4-byte Buffer Overflow","content_text":"OpenSSL · OpenSSL. Not in CISA KEV. EPSS 90.8% (higher than 99.8% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. Priority 33.2 of 100.","summary":"X.509 Email Address 4-byte Buffer Overflow","date_published":"2022-11-01T00:00:00.000Z","date_modified":"2026-04-14T08:58:02.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":33.2,"kev":null,"epss":{"score":0.9077,"percentile":0.99804},"cvss":{"score":7.5,"severity":"HIGH","version":"3.1"},"vendor":"OpenSSL","product":"OpenSSL","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2022-2068","url":"https://patchfirst.co/cve/CVE-2022-2068/","title":"CVE-2022-2068: The c_rehash script allows command injection","content_text":"OpenSSL · OpenSSL. Not in CISA KEV. EPSS 96.4% (higher than 99.88% of CVEs). CVSS 9.8 CRITICAL. Priority 29.8 of 100.","summary":"The c_rehash script allows command injection","date_published":"2022-06-21T00:00:00.000Z","date_modified":"2026-10-14T12:57:37.000Z","tags":[],"_patchfirst":{"reason":"published","priority":29.8,"kev":null,"epss":{"score":0.96391,"percentile":0.9988},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"OpenSSL","product":"OpenSSL","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2014-0160#kev","url":"https://patchfirst.co/cve/CVE-2014-0160/","title":"[KEV] CVE-2014-0160: OpenSSL Information Disclosure Vulnerability","content_text":"OpenSSL · OpenSSL. In CISA KEV since 2022-05-04. ENISA EUVD lists it as exploited. EPSS >99.9% (higher than 99.99% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1005 Data from Local System. Named in 1 threat report. Priority 72.1 of 100.","summary":"OpenSSL Information Disclosure Vulnerability","date_published":"2022-05-04T00:00:00.000Z","date_modified":"2026-06-17T00:02:24.000Z","tags":["kev","public-exploit","T1190","T1005"],"_patchfirst":{"reason":"kev","priority":72.1,"kev":{"dateAdded":"2022-05-04","ransomware":false},"epss":{"score":0.99999,"percentile":0.99996},"cvss":{"score":7.5,"severity":"HIGH","version":"3.1"},"vendor":"OpenSSL","product":"OpenSSL","techniqueIds":["T1190","T1005"],"reportCount":1,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2022-1292","url":"https://patchfirst.co/cve/CVE-2022-1292/","title":"CVE-2022-1292: The c_rehash script allows command injection","content_text":"OpenSSL · OpenSSL. Not in CISA KEV. EPSS 82.6% (higher than 99.67% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. Priority 34.8 of 100.","summary":"The c_rehash script allows command injection","date_published":"2022-05-03T00:00:00.000Z","date_modified":"2026-10-14T12:34:52.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":34.8,"kev":null,"epss":{"score":0.82612,"percentile":0.99665},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"OpenSSL","product":"OpenSSL","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2022-0778","url":"https://patchfirst.co/cve/CVE-2022-0778/","title":"CVE-2022-0778: Infinite loop in BN_mod_sqrt() reachable when parsing certificates","content_text":"OpenSSL · OpenSSL. Not in CISA KEV. EPSS 73.2% (higher than 99.46% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. Priority 33.1 of 100.","summary":"Infinite loop in BN_mod_sqrt() reachable when parsing certificates","date_published":"2022-03-15T00:00:00.000Z","date_modified":"2026-10-14T12:12:36.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":33.1,"kev":null,"epss":{"score":0.73188,"percentile":0.99456},"cvss":{"score":7.5,"severity":"HIGH","version":"3.1"},"vendor":"OpenSSL","product":"OpenSSL","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2021-3711","url":"https://patchfirst.co/cve/CVE-2021-3711/","title":"CVE-2021-3711: SM2 Decryption Buffer Overflow","content_text":"OpenSSL · OpenSSL. Not in CISA KEV. EPSS 87.8% (higher than 99.76% of CVEs). Priority 21.3 of 100.","summary":"SM2 Decryption Buffer Overflow","date_published":"2021-08-24T00:00:00.000Z","date_modified":"2026-10-08T21:03:25.000Z","tags":[],"_patchfirst":{"reason":"published","priority":21.3,"kev":null,"epss":{"score":0.87816,"percentile":0.9976},"cvss":null,"vendor":"OpenSSL","product":"OpenSSL","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2021-3449","url":"https://patchfirst.co/cve/CVE-2021-3449/","title":"CVE-2021-3449: NULL pointer deref in signature_algorithms processing","content_text":"OpenSSL · OpenSSL. Not in CISA KEV. EPSS 63.5% (higher than 99.21% of CVEs). Public exploit code exists. Priority 26.4 of 100.","summary":"NULL pointer deref in signature_algorithms processing","date_published":"2021-03-25T00:00:00.000Z","date_modified":"2026-10-08T21:13:50.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":26.4,"kev":null,"epss":{"score":0.63542,"percentile":0.99211},"cvss":null,"vendor":"OpenSSL","product":"OpenSSL","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2017-3730","url":"https://patchfirst.co/cve/CVE-2017-3730/","title":"CVE-2017-3730: Bad (EC)DHE parameters cause a client crash","content_text":"OpenSSL · OpenSSL. Not in CISA KEV. EPSS 55.3% (higher than 99.03% of CVEs). Public exploit code exists. Priority 24.8 of 100.","summary":"Bad (EC)DHE parameters cause a client crash","date_published":"2017-05-04T00:00:00.000Z","date_modified":"2024-09-16T17:48:53.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":24.8,"kev":null,"epss":{"score":0.55294,"percentile":0.99029},"cvss":null,"vendor":"OpenSSL","product":"OpenSSL","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2017-3731","url":"https://patchfirst.co/cve/CVE-2017-3731/","title":"CVE-2017-3731: Truncated packet could crash via OOB read","content_text":"OpenSSL · OpenSSL. Not in CISA KEV. EPSS 57.3% (higher than 99.08% of CVEs). Priority 19.8 of 100.","summary":"Truncated packet could crash via OOB read","date_published":"2017-05-04T00:00:00.000Z","date_modified":"2024-09-16T22:40:54.000Z","tags":[],"_patchfirst":{"reason":"published","priority":19.8,"kev":null,"epss":{"score":0.57322,"percentile":0.99075},"cvss":null,"vendor":"OpenSSL","product":"OpenSSL","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}}]}