https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-84784.htmlhttps://patchthecve.com/cve/CVE-2026-84784.htmlThu, 08 Oct 2026 01:21:22 +0000HIGH 7.5: Issue summary: A malicious remote peer may flood the local QUIC stack with NEW_CONNECTION_ID frames by avoiding a limit check on how many connection IDs the remote QUIC stack can use. Impact summary: The local QUIC stack sends a RETIRE_CONN_ID frame for every NEW_CONNECTION_ID frame it receives. Thhttps://patchthecve.com/cve/CVE-2026-84783.htmlhttps://patchthecve.com/cve/CVE-2026-84783.htmlThu, 08 Oct 2026 01:21:13 +0000HIGH 7.5: Issue summary: The first concurrent use of the same X.509 certificate by several threads may cause its cached extension data to be freed while another thread is still using it. Impact summary: A remote, unauthenticated peer could crash a multi-threaded TLS client, or a multi-threaded TLS server thahttps://patchthecve.com/cve/CVE-2026-84782.htmlhttps://patchthecve.com/cve/CVE-2026-84782.htmlThu, 08 Oct 2026 01:20:56 +0000HIGH 8.2: Issue summary: The DTLS retransmission logic does not correctly handle a handshake message write that is suspended part-way through. The retransmitted message can be read past the message buffer and the retransmission overwrites the internal state the suspended write needs to resume correctly. Impahttps://patchthecve.com/cve/CVE-2026-77696.htmlhttps://patchthecve.com/cve/CVE-2026-77696.htmlThu, 08 Oct 2026 01:20:41 +0000LOW 3.7: Issue summary: SM2 signature generation uses non-constant-time arithmetic on secret values, forming a timing side-channel. Impact summary: An attacker able to measure SM2 signing times may learn information about the per-signature secret nonce, which over many signatures can, via a lattice / Hiddenhttps://patchthecve.com/cve/CVE-2026-75806.htmlhttps://patchthecve.com/cve/CVE-2026-75806.htmlThu, 08 Oct 2026 01:20:33 +0000MEDIUM 5.3: Issue summary: An established DTLS 1.2 association using an AEAD cipher suite can be terminated by a single unauthenticated datagram whose encrypted fragment is shorter than the mandatory explicit IV and authentication tag overhead. Impact summary: An attacker who can send a datagram that is routedhttps://patchthecve.com/cve/CVE-2026-75805.htmlhttps://patchthecve.com/cve/CVE-2026-75805.htmlThu, 08 Oct 2026 01:20:24 +0000MEDIUM 5.3: Issue summary: A CMP client that requests certificate revocation on the basis of a PKCS#10 CSR may dereference a NULL pointer and terminate abnormally when processing a crafted revocation response. Impact summary: The NULL pointer dereference happens on a read which leads to a crash and a Denial https://patchthecve.com/cve/CVE-2026-75804.htmlhttps://patchthecve.com/cve/CVE-2026-75804.htmlThu, 08 Oct 2026 01:20:01 +0000MEDIUM 5.3: Issue summary: OpenSSL QUIC stack does not enforce connection level flow control for streams. Remote peers may send more bytes as long as they fit within the stream flow control limits. Impact summary: A malicious remote peer may exploit the lack of connection flow control for streams to make the Qhttps://patchthecve.com/cve/CVE-2026-72897.htmlhttps://patchthecve.com/cve/CVE-2026-72897.htmlThu, 08 Oct 2026 01:19:41 +0000HIGH 7.5: Issue summary: A TLS server that calls SSL_set_SSL_CTX() to switch a connection to a different SSL_CTX part way through a handshake may access memory beyond the end of an internal array if the replacement context knows about more provider signature algorithms than the context the connection was creahttps://patchthecve.com/cve/CVE-2026-54875.htmlhttps://patchthecve.com/cve/CVE-2026-54875.htmlThu, 08 Oct 2026 01:19:29 +0000LOW 3.7: Issue summary: A non-constant-time optimized implementation of scalar point multiplication is used for SM2 private key operations on ARM64 and RISC-V platforms. Impact summary: An attacker able to measure the time taken by, or to observe the cache-line access pattern of SM2 signing or decryption onhttps://patchthecve.com/cve/CVE-2026-54873.htmlhttps://patchthecve.com/cve/CVE-2026-54873.htmlThu, 08 Oct 2026 01:19:18 +0000HIGH 7.5: Issue summary: QUIC process may keep memory for QUIC packet buffer for much longer period than necessary. Impact summary: Remote peer can exploit this vulnerability by sending maliciously crafted packets, making the local QUIC stack to keep the memory for packet buffers allocated. The time for whichttps://patchthecve.com/cve/CVE-2026-54872.htmlhttps://patchthecve.com/cve/CVE-2026-54872.htmlThu, 08 Oct 2026 01:19:04 +0000LOW 3.7: Issue summary: The generic elliptic-curve scalar multiplication used for ECDSA and SM2 signature operations with curves that do not have a dedicated implementation leaks information about the secret nonce through timing. Impact summary: An attacker able to measure signing times may learn informatiohttps://patchthecve.com/cve/CVE-2026-42772.htmlhttps://patchthecve.com/cve/CVE-2026-42772.htmlThu, 08 Oct 2026 01:18:57 +0000MEDIUM 5.3: Issue summary: The QUIC stream reassembly algorithm performance deteriorates progressively as packets are arriving out of order. The worst case has a quadratic complexity proportional to the number of stream frames kept in the buffer for the received stream data. Impact summary: A remote QUIC peer https://patchthecve.com/cve/CVE-2026-35191.htmlhttps://patchthecve.com/cve/CVE-2026-35191.htmlThu, 08 Oct 2026 01:02:06 +0000LOW 3.7: Issue summary: The OpenSSL QUIC server, when configured to not preform address validation, can be forced to count incoming packets multiple times in its unvalidated credit computation, leading to a violation of the RFC 9000 unvalidated connection amplification limit of 3 times the amount of data rechttps://patchthecve.com/cve/CVE-2026-35189.htmlhttps://patchthecve.com/cve/CVE-2026-35189.htmlThu, 08 Oct 2026 01:01:54 +0000MEDIUM 5.3: Issue summary: A certificate with many nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap growth when OpenSSL caches X.509 extensions. Impact summary: Receiving a crafted certificate from a malicious peer can lead to significant memory pressure and possible Denial of Servihttps://patchthecve.com/cve/CVE-2026-75803.htmlhttps://patchthecve.com/cve/CVE-2026-75803.htmlFri, 11 Sep 2026 21:17:17 +0000CRITICAL 9.1: Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ciphertext can report success without verifying the supplied authentication tag when the operation is finalized by calling the EVP_Cipher() function. Impact summary: Applications calling EVP_Cipher() on an empty ciphertext and exhttps://patchthecve.com/cve/CVE-2026-63076.htmlhttps://patchthecve.com/cve/CVE-2026-63076.htmlFri, 11 Sep 2026 21:17:12 +0000HIGH 7.5: Issue summary: OpenSSL CMP password based protection verification only checks whether the protectionAlg parameter was not NULL and not its ASN.1 type, before treating it as a PBMParameter. A crafted message can contain a parameter of a different type, which is then dereferenced as an invalid pointerhttps://patchthecve.com/cve/CVE-2026-63075.htmlhttps://patchthecve.com/cve/CVE-2026-63075.htmlFri, 11 Sep 2026 21:17:05 +0000HIGH 7.5: Issue summary: When OpenSSL processes QUIC traffic from a peer that repeatedly sends ack-eliciting packets while not acknowledging ACK-only responses, the QUIC stack can retain ACK-only packet metadata for the lifetime of the connection. Impact summary: A remote peer that can complete a QUIC handshhttps://patchthecve.com/cve/CVE-2026-63074.htmlhttps://patchthecve.com/cve/CVE-2026-63074.htmlFri, 11 Sep 2026 21:16:58 +0000MEDIUM 5.9: Issue summary: The OpenSSL Certificate Management Protocol (CMP) caches additional certificates (extraCerts) sent in a CMP message, but never expunges them (for instance if they are invalid). If a server reuses an OSSL_CMP_CTX frequently, this cache of extraCerts may grow unboundedly, and a maliciohttps://patchthecve.com/cve/CVE-2026-63073.htmlhttps://patchthecve.com/cve/CVE-2026-63073.htmlFri, 11 Sep 2026 21:16:45 +0000CRITICAL 9.8: Issue summary: OpenSSL CMP response validation passed an unexpected response sender distinguished name directly as the format string to `ERR_raise_data()`. Impact summary: A malicious or intercepted CMP endpoint can crash a CMP client that enforces an expected sender or uses a pinned server certifihttps://patchthecve.com/cve/CVE-2026-63072.htmlhttps://patchthecve.com/cve/CVE-2026-63072.htmlFri, 11 Sep 2026 21:16:34 +0000HIGH 7.5: Issue summary: OpenSSL CMS decryption sizes the key-unwrap output buffer based on querying the unwrapped key size, but the AES-WRAP-PAD unwrap primitive can write and cleanse more bytes than that query reports, causing an 8-byte out-of-bounds heap write. Impact summary: An attacker who supplies a chttps://patchthecve.com/cve/CVE-2026-54874.htmlhttps://patchthecve.com/cve/CVE-2026-54874.htmlFri, 11 Sep 2026 21:16:28 +0000HIGH 7.5: Issue summary: Receiving a DTLS record for a future epoch while a handshake is in progress causes OpenSSL to buffer far more memory than the record itself requires. Impact summary: A peer can use a small amount of network traffic to make an OpenSSL DTLS endpoint retain a disproportionately large amhttps://patchthecve.com/cve/CVE-2026-18798.htmlhttps://patchthecve.com/cve/CVE-2026-18798.htmlWed, 23 Sep 2026 16:07:09 +0000HIGH 7.5: Issue summary: QUIC server may double free QRX (QUIC record layer RX) object when channel creation fails for initial packet. Impact summary: Double free leads to heap corruption, which typically results in termination of QUIC server process, leading to Denial of Service. There is so far no evidenchttps://patchthecve.com/cve/CVE-2026-14457.htmlhttps://patchthecve.com/cve/CVE-2026-14457.htmlFri, 11 Sep 2026 21:14:35 +0000HIGH 7.5: Issue summary: In a server or client configuration with RFC7250 Raw Public Keys (RPKs) enabled, and only the private key (with no associated certificate) configured locally, a NULL pointer dereference may occur when the remote peer solicits raw public keys and also sends the typically omitted "signa