Vendor
OpenVPN
100 known vulnerabilities in products by OpenVPN, 0 of them actively exploited (CISA KEV).
Key figures
100
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
11
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2024-1305 | OpenVPN Tap-windows6: Integer Overflow or Wraparound | 9.8 | |
| Critical | CVE-2024-27903 | OpenVPN 2: Unverified Ownership | 9.8 | |
| High | CVE-2025-10680 | OpenVPN: OS Command Injection | 8.8 | |
| High | CVE-2024-27459 | OpenVPN GUI: Stack-based Buffer Overflow | 7.8 | |
| High | CVE-2024-24974 | OpenVPN 2: Improper Restriction of Communication Channel to Intended Endpoints | 7.5 | |
| Critical | CVE-2022-0547 | OpenVPN: Authentication Bypass by Primary Weakness | 9.8 | |
| Critical | CVE-2017-12166 | OpenVPN: Buffer Overflow | 9.8 | |
| High | CVE-2017-7478 | OpenVPN: Reachable Assertion | 7.5 | |
| High | CVE-2020-15078 | OpenVPN: Authentication Bypass by Primary Weakness | 7.5 | |
| High | CVE-2017-7508 | OpenVPN: Denial of Service | 7.5 | |
| Critical | CVE-2023-46850 | OpenVPN 2 (Community): Use After Free | 9.8 | |
| Medium | CVE-2017-7522 | OpenVPN: Improper Input Validation | 6.5 | |
| High | CVE-2017-7520 | OpenVPN: Exposure of Sensitive Information to an Unauthorized Actor | 7.4 | |
| Medium | CVE-2016-6329 | OpenVPN: security vulnerability | 5.9 | |
| Medium | CVE-2017-5868 | OpenVPN Access Server: CRLF Injection | 6.1 | |
| Critical | CVE-2018-7544 | OpenVPN: Information Disclosure | 9.1 | |
| Medium | CVE-2017-7521 | OpenVPN: Uncontrolled Resource Consumption | 5.9 | |
| Critical | CVE-2020-8953 | OpenVPN Access Server: Authentication Bypass | 9.8 | |
| High | CVE-2020-36382 | OpenVPN Access Server: Improper Check for Unusual or Exceptional Conditions | 7.5 | |
| Critical | CVE-2026-9560 | OpenVPN Connect: OS Command Injection | 7.8 | |
| Medium | CVE-2017-7479 | OpenVPN: Reachable Assertion | 6.5 | |
| Critical | CVE-2026-13379 | OpenVPN: Improper Neutralization of Value Delimiters | 9.1 | |
| Critical | CVE-2024-5594 | OpenVPN: Improper Validation of Specified Type of Input | 9.1 | |
| High | CVE-2023-46849 | OpenVPN 2 (Community): Divide By Zero | 7.5 | |
| High | CVE-2020-11462 | OpenVPN Access Server: security vulnerability | 7.5 |
Products
| OpenVPN | 65 | 0 |
| OpenVPN Access Server | 21 | 0 |
| OpenVPN Connect | 8 | 0 |
| Ovpn-dco-win | 7 | 0 |
| Access Server | 4 | 0 |
| OpenVPN-GUI | 4 | 0 |
| Openvpn Connect | 3 | 0 |