修正バージョン
バージョンを確認する
openssl version4.0 に影響するCVE
| CVE | タイトル | CVSS | 悪用 | EPSS | 公開日 |
|---|---|---|---|---|---|
| CVE-2026-34182 | CMS AuthEnvelopedData Processing May Accept Forged Messages | 9.1 | — | 2026-06-09 | |
| CVE-2026-45447 | Heap Use-After-Free in the PKCS7_verify() Function | 8.8 | — | 2026-06-09 | |
| CVE-2026-7383 | Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion | 8.1 | — | 2026-06-09 | |
| CVE-2026-34180 | Heap Buffer Over-read in ASN.1 Content Parsing | 7.5 | — | 2026-06-09 | |
| CVE-2026-45445 | AES-OCB IV Ignored on EVP_Cipher() Path | 7.5 | — | 2026-06-09 | |
| CVE-2026-42765 | NULL Dereference in Certificate Verification with OCSP Checking | 7.5 | — | 2026-06-09 | |
| CVE-2026-34183 | Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler | 7.5 | — | 2026-06-09 | |
| CVE-2026-9076 | Out-of-Bounds Read in CMS Password-Based Decryption | 7.5 | — | 2026-06-09 | |
| CVE-2026-42764 | NULL Pointer Dereference in QUIC Server Initial Packet Handling | 7.5 | — | 2026-06-09 | |
| CVE-2026-34181 | PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys | 7.4 | — | 2026-06-09 | |
| CVE-2026-42771 | Possible Out of Bounds Read in X509_VERIFY_PARAM_set1_email() | 6.2 | — | 2026-06-09 | |
| CVE-2026-42766 | Possible NULL Dereference in Password-Based CMS Decryption | 5.9 | — | 2026-06-09 | |
| CVE-2026-42767 | NULL Pointer Dereference in CRMF EncryptedValue Decryption | 5.9 | — | 2026-06-09 | |
| CVE-2026-42769 | Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate | 5.3 | — | 2026-06-09 | |
| CVE-2026-35188 | Double-free When Checking OCSP Stapled Response | 5.0 | — | 2026-06-09 | |
| CVE-2026-45446 | Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes | 4.8 | — | 2026-06-09 | |
| CVE-2026-42770 | FFC-DH Peer Validation Uses Attacker-Supplied q | 3.7 | — | 2026-06-09 | |
| CVE-2026-42768 | Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt() | 3.7 | — | 2026-06-09 |
データ：CVE List（CVE® Program）、NVD、CISA KEV、FIRST EPSS（EPSS については https://www.first.org/epss を参照）、endoflife.date。ソフトウェア一覧：awesome-selfhosted（CC BY-SA 3.0）。