Vulnerability Overview
Exploitation Activity
Exploitation Intelligence
OpenSSL has patched a high-severity stack buffer overflow vulnerability, tracked as CVE-2025-15467. This flaw allows unauthenticated attackers to trigger denial-of-service conditions and potentially execute remote code via specially crafted CMS messages. Organizations using OpenSSL are urged to appl...
Multiple vulnerabilities in OpenSSL have been disclosed, affecting various Ubuntu LTS versions. Key issues include improper handling of certificate revocation lists (CVE-2026-35189), leading to potential denial of service, and timing side-channel attacks due to incorrect scalar multiplication (CVE-2...
Multiple vulnerabilities in OpenSSL affecting Ubuntu 20.04 LTS and other versions have been fixed in the USN-7980-2 update. Key vulnerabilities include CVE-2025-68160, CVE-2025-69418, CVE-2025-69419, CVE-2025-69420, CVE-2025-69421, CVE-2026-22795, and CVE-2026-22796. Users of Ubuntu 20.04 LTS, 18.04...
OpenSSL vulnerabilities were discovered affecting Ubuntu 25.10, 24.04 LTS, and 22.04 LTS. The issues involve incorrect validation of PBMAC1 parameters and parsing of CMS AuthEnvelopedData messages, potentially allowing attackers to cause OpenSSL to crash, resulting in a denial of service. The vulner...
