Skip to content
Noroxi

OpenVPN records

79 published records for vendor openvpn.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
5
With a fix record
55.7%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17
  2. 18
  3. 20
  4. 21
  5. 22
  6. 23
  7. 24
  8. 25
  9. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

79 records
  • CVE-2024-1305
    44Plan

    tap-windows6 driver version 9.26 and earlier does not properly check the size data of incomming write operations which an attacker can use

    CriticalCVSS 9.8No exploitEPSS 15%

    openvpn · tap-windows6Jul 8, 2024

  • CVE-2024-27903
    42Plan

    OpenVPN plug-ins on Windows with OpenVPN 2.6.9 and earlier could be loaded from any directory, which allows an attacker to load an arbitrary

    CriticalCVSS 9.8No exploitEPSS 9%

    openvpn · openvpnJul 8, 2024

  • CVE-2017-12166
    40Plan

    OpenVPN versions before 2.3.3 and 2.4.x before 2.4.4 are vulnerable to a buffer overflow vulnerability when key-method 1 is used, possibly r

    CriticalCVSS 9.8No exploitEPSS 4%

    openvpn · openvpnOct 3, 2017

  • CVE-2022-0547
    40Plan

    OpenVPN 2.1 until v2.4.12 and v2.5.6 may enable authentication bypass in external authentication plug-ins when more than one of them makes u

    CriticalCVSS 9.8No exploitEPSS 4%

    openvpn · openvpnMar 18, 2022

  • CVE-2023-46850
    40Plan

    Use after free in OpenVPN version 2.6.0 to 2.6.6 may lead to undefined behavoir, leaking memory buffers or remote execution when sending net

    CriticalCVSS 9.8No exploitEPSS 2%

    openvpn · openvpnNov 10, 2023

  • CVE-2020-8953
    39Monitor

    OpenVPN Access Server 2.8.x before 2.8.1 allows LDAP authentication bypass (except when a user is enrolled in two-factor authentication).

    CriticalCVSS 9.8No exploitEPSS 1%

    openvpn · openvpn access serverFeb 13, 2020

  • CVE-2006-1629
    37Monitor

    OpenVPN 2.0 through 2.0.5 allows remote malicious servers to execute arbitrary code on the client by using setenv with the LD_PRELOAD enviro

    CriticalCVSS 9.0No exploitEPSS 3%

    openvpn · openvpnApr 6, 2006

  • CVE-2018-7544
    37Monitor

    A cross-protocol scripting issue was discovered in the management interface in OpenVPN through 2.4.5.

    CriticalCVSS 9.1No exploitEPSS 2%

    openvpn · openvpnMar 16, 2018

  • CVE-2026-9560
    37Monitor

    Privilege escalation via background service of OpenVPN Connect 3.5.1 through 3.8.1 on macOS allows attackers to execute arbitrary commands w

    CriticalCVSS 9.4Proof of conceptEPSS 0%

    openvpn · connectMay 26, 2026

  • CVE-2024-5594
    36Monitor

    OpenVPN before 2.6.11 does not santize PUSH_REPLY messages properly which an attacker controlling the server can use to inject unexpected ar

    CriticalCVSS 9.1No exploitEPSS 1%

    openvpn · openvpnJan 6, 2025

  • CVE-2025-12106
    36Monitor

    Insufficient argument validation in OpenVPN 2.7_alpha1 through 2.7_rc1 allows an attacker to trigger a heap buffer over-read when parsing IP

    CriticalCVSS 9.1No exploitEPSS 1%

    openvpn · openvpnDec 1, 2025

  • CVE-2024-4877
    35Monitor

    OpenVPN version 2.4.0 through 2.6.10 on Windows allows an external, lesser privileged process to create a named pipe which the OpenVPN GUI c

    HighCVSS 8.8No exploitEPSS 0%

    openvpn · openvpnApr 3, 2025

  • CVE-2017-7478
    34Monitor

    OpenVPN version 2.3.12 and newer is vulnerable to unauthenticated Denial of Service of server via received large control packet.

    HighCVSS 7.5Proof of conceptEPSS 14%

    openvpn · openvpnMay 15, 2017

  • CVE-2024-24974
    33Monitor

    The interactive service in OpenVPN 2.6.9 and earlier allows the OpenVPN service pipe to be accessed remotely, which allows a remote attacker

    HighCVSS 7.5No exploitEPSS 10%

    openvpn · openvpnJul 8, 2024

  • CVE-2024-27459
    33Monitor

    The interactive service in OpenVPN 2.6.9 and earlier allows an attacker to send data causing a stack overflow which can be used to execute a

    HighCVSS 7.8No exploitEPSS 8%

    openvpn · openvpnJul 8, 2024

  • CVE-2023-7235
    33Monitor

    The OpenVPN GUI installer before version 2.6.9 did not set the proper access control restrictions to the installation directory of OpenVPN b

    HighCVSS 8.4No exploitEPSS 0%

    openvpn · openvpn guiFeb 21, 2024

  • CVE-2020-15078
    31Monitor

    OpenVPN 2.5.1 and earlier versions allows a remote attackers to bypass authentication and access control channel data on servers configured

    HighCVSS 7.5No exploitEPSS 5%

    openvpn · openvpnApr 26, 2021

  • CVE-2017-7508
    31Monitor

    OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to remote denial-of-service when receiving malformed IPv6 packet.

    HighCVSS 7.5No exploitEPSS 5%

    openvpn · openvpnJun 27, 2017

  • CVE-2005-3393
    31Monitor

    Format string vulnerability in the foreign_option function in options.c for OpenVPN 2.0.x allows remote clients to execute arbitrary code vi

    HighCVSS 7.5No exploitEPSS 3%

    openvpn · openvpnNov 1, 2005

  • CVE-2008-3459
    31Monitor

    Unspecified vulnerability in OpenVPN 2.1-beta14 through 2.1-rc8, when running on non-Windows systems, allows remote servers to execute arbit

    HighCVSS 7.6No exploitEPSS 2%

    openvpn · openvpnAug 4, 2008

  • CVE-2020-36382
    31Monitor

    OpenVPN Access Server 2.7.3 to 2.8.7 allows remote attackers to trigger an assert during the user authentication phase via incorrect authent

    HighCVSS 7.5No exploitEPSS 2%

    openvpn · openvpn access serverJun 4, 2021

  • CVE-2021-3613
    31Monitor

    OpenVPN Connect 3.2.0 through 3.3.0 allows local users to load arbitrary dynamic loadable libraries via an OpenSSL configuration file if pre

    HighCVSS 7.8No exploitEPSS 1%

    openvpn · connectJul 2, 2021

  • CVE-2020-9442
    31Monitor

    OpenVPN Connect 3.1.0.361 on Windows has Insecure Permissions for %PROGRAMDATA%\OpenVPN Connect\drivers\tap\amd64\win10, which allows local

    HighCVSS 7.8Proof of conceptEPSS 1%

    openvpn · connectFeb 28, 2020

  • CVE-2018-9336
    31Monitor

    openvpnserv.exe (aka the interactive service helper) in OpenVPN 2.4.x before 2.4.6 allows a local attacker to cause a double-free of memory

    HighCVSS 7.8No exploitEPSS 1%

    openvpn · openvpnMay 1, 2018

  • CVE-2020-15076
    31Monitor

    Private Tunnel installer for macOS version 3.0.1 and older versions may corrupt system critical files it should not have access via symlinks

    HighCVSS 7.8No exploitEPSS 0%

    openvpn · private tunnelMay 26, 2021