Veille CVE

Lundi 7 septembre 2026

9 CVE

Critique 0 Élevée 3 Moyenne 4 Faible 2 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « OpenVPN » ✕
  1. CVE-2026-82325 6.8 Moyenne

    OpenVPN ovpn-dco-win

    A use-after-free vulnerability in the OpenVPN ovpn-dco-win driver version 2.5.0 through 2.8.6 allows local authenticated users to cause a system crash via crafted control messages

  2. CVE-2026-84732 8.7 Élevée

    OpenVPN

    Retransmissions of ACK packet ID in OpenVPN through 2.6.22 and 2.7.6 allow remote unauthenticated attackers to cause a denial of service via crafted inputs that trigger a timeout integer overflow

  3. CVE-2026-84256 7.7 Élevée

    OpenVPN

    An argument parsing issue in OpenVPN 2.1_rc10 through 2.6.22 and 2.7_alpha1 through 2.7.7 on Windows allows remote authenticated users to execute arbitrary commands via a crafted certificate subject

  4. CVE-2026-84226 8.5 Élevée

    OpenVPN

    OpenVPN version 2.5.0 through 2.6.22 and 2.7_alpha1 through 2.7.6 on Windows allows local authenticated users to perform a binary planting attack during network configuration steps

  5. CVE-2026-82312 1.8 Faible

    OpenVPN

    OpenVPN 2.0.0 through 2.6.22 and 2.7_alpha1 through 2.7.6 on Windows allows local authenticated users to cause a denial of service via a NULL DACL on named IPC objects

  6. CVE-2026-81830 5.6 Moyenne

    OpenVPN

    The Windows interactive service in OpenVPN 2.4.0 through 2.6.22 allows local authenticated users to bypass the trusted configuration directory constraint via incorrect file path validation

  7. CVE-2026-81738 2.3 Faible

    OpenVPN

    OpenVPN 2.5.0 through 2.7.6 on Windows using the tap-windows6 driver allows attackers to trigger an out-of-bounds write via crafted DOMAIN-SEARCH entries

  8. CVE-2026-78221 5.9 Moyenne

    OpenVPN

    An incorrect buffer size calculation in the Windows Interactive Service in OpenVPN 2.7_alpha1 through 2.7.6 allows local authenticated users to cause memory corruption or disclose sensitive information via crafted NRPT inputs.

  9. CVE-2026-78043 5.6 Moyenne

    OpenVPN

    The Windows Interactive Service in OpenVPN 2.7_alpha1 through 2.7.6 allows local authenticated users to bypass the trusted configuration directory constraint and load arbitrary configuration files via specially crafted paths