Veille CVE

Recherche « OpenVPN ovpn-dco-win »

3 CVE

  1. CVE-2026-105390 6.9 Moyenne

    OpenVPN ovpn-dco-win

    Improper synchronization in the OpenVPN ovpn-dco-win for Windows versions 0.6.5 through 1.3.5 and 2.4.0 through 2.8.7 allows local attackers to trigger a deadlock via a crafted write to the ovpn-dco device, causing the host to become unresponsive.

  2. CVE-2026-82325 6.8 Moyenne

    OpenVPN ovpn-dco-win

    A use-after-free vulnerability in the OpenVPN ovpn-dco-win driver version 2.5.0 through 2.8.6 allows local authenticated users to cause a system crash via crafted control messages

  3. CVE-2026-11604 6.5 Moyenne

    OpenVPN ovpn-dco-win

    An incorrect buffer size calculation in the epoch key generator in OpenVPN ovpn-dco-win version 2.0.0 through 2.8.3 allows a remote authenticated peer to trigger a heap-based buffer overflow and kernel memory corruption via a crafted data packet, resulting in a system crash (denial of service).