Vulnerability Overview
Exploitation Activity
Exploitation Intelligence
OpenSSL has patched a high-severity stack buffer overflow vulnerability, tracked as CVE-2025-15467. This flaw allows unauthenticated attackers to trigger denial-of-service conditions and potentially execute remote code via specially crafted CMS messages. Organizations using OpenSSL are urged to appl...
On April 21, 2026, Oracle released its Critical Patch Update (CPU) for April 2026, which includes 481 security patches addressing 241 unique CVEs across 28 product families. Among these, 34 patches are classified as critical. The Oracle Communications product family is notably affected, with 139 vul...
Multiple vulnerabilities in OpenSSL affecting Ubuntu 20.04 LTS and other versions have been fixed in the USN-7980-2 update. Key vulnerabilities include CVE-2025-68160, CVE-2025-69418, CVE-2025-69419, CVE-2025-69420, CVE-2025-69421, CVE-2026-22795, and CVE-2026-22796. Users of Ubuntu 20.04 LTS, 18.04...
OpenSSL vulnerabilities were discovered affecting Ubuntu 25.10, 24.04 LTS, and 22.04 LTS. The issues involve incorrect validation of PBMAC1 parameters and parsing of CMS AuthEnvelopedData messages, potentially allowing attackers to cause OpenSSL to crash, resulting in a denial of service. The vulner...
