Skip to main content

OpenSSL EUVDEUVD-2026-35491

| CVE-2026-45447 HIGH
Use After Free (CWE-416)
2026-06-09 GHSA-f684-cpcq-j565
OpenSSL Information Disclosure Use After Free Memory Corruption
8.8
CVSS 3.1 · Vendor
Share

Severity by source

Vendor (CNA) PRIMARY
8.8 HIGH
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
SUSE
7.5 HIGH
AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Red Hat
8.1 HIGH
qualitative

Primary rating from Vendor (CNA).

CVSS VectorVendor

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

10
Analysis Updated
Jun 10, 2026 - 15:32 vuln.today
v3 (cvss_changed)
Analysis Updated
Jun 10, 2026 - 15:31 vuln.today
v2 (cvss_changed)
Re-analysis Queued
Jun 10, 2026 - 15:22 vuln.today
cvss_changed
Severity Changed
Jun 10, 2026 - 15:22 NVD
CRITICAL HIGH
CVSS changed
Jun 10, 2026 - 15:22 NVD
9.8 (CRITICAL) 8.8 (HIGH)
Source Code Evidence Fetched
Jun 09, 2026 - 20:24 vuln.today
Analysis Generated
Jun 09, 2026 - 20:24 vuln.today
CVSS changed
Jun 09, 2026 - 20:22 NVD
9.8 (CRITICAL)
CVE Published
Jun 09, 2026 - 11:43 nvd
UNKNOWN (no severity yet)
CVE Published
Jun 09, 2026 - 11:43 nvd
CRITICAL 9.8

Description PRE-NVD

Disclosed via GitHub release of openssl/openssl. NVD scoring and full description are pending.

Articles & Coverage 2

News 7 New OpenSSL Vulnerabilities - 1 Critical, 6 High Severity Jun 10, 2026 News Critical Heap Use-After-Free RCE in OpenSSL PKCS7_verify - CVE-2026-45447 Jun 09, 2026

AnalysisAI

Heap use-after-free in OpenSSL's PKCS7_verify() function affects multiple supported branches (1.0.2, 1.1.1, 3.0.x, 3.4.x, 3.5.x, 3.6.x, and 4.0.0) and is fixed in OpenSSL 4.0.1. Authenticated remote attackers able to submit crafted PKCS#7 signed data to a vulnerable application can trigger memory corruption leading to high-impact compromise of confidentiality, integrity, and availability per CVSS 8.8. No public exploit identified at time of analysis; EPSS is low (0.12%, 30th percentile) and CISA SSVC reports no observed exploitation, though the flaw is rated automatable with total technical impact.

Technical ContextAI

OpenSSL is the most widely deployed cryptographic library, providing TLS/SSL, X.509, S/MIME (CMS/PKCS#7), and PKI primitives to operating systems, web servers, mail servers, VPNs, and embedded devices. The defect lives in PKCS7_verify(), the high-level API used to validate PKCS#7 / CMS SignedData blobs (commonly seen in S/MIME email, code-signing pipelines, and document signing). The root cause is CWE-416 (Use After Free): an internal object referenced during signature verification is released while another code path still holds and dereferences a pointer to it, allowing the freed heap chunk to be reallocated and manipulated by attacker-controlled data. Five upstream security commits (3aad5eb, 7d4a980, 9dfd688, a541ae8, c505d75) implement the fix, which ships in OpenSSL 4.0.1 and back-ported point releases listed in the EUVD record.

RemediationAI

Apply the vendor-released patch by upgrading OpenSSL to 4.0.1 on the 4.x branch, or to the corresponding back-port for your branch: 3.6.3, 3.5.7, 3.4.6, 3.0.21, 1.1.1zh, or 1.0.2zq (see https://openssl-library.org/news/secadv/20260609.txt and the GitHub release at https://github.com/openssl/openssl/releases/tag/openssl-4.0.1). On Ubuntu, install the updates referenced in USN-8414-2 (https://ubuntu.com/security/notices/USN-8414-2); other distributions should track their respective security trackers. Rebuild and redeploy applications that statically link OpenSSL, and restart long-running services (mail servers, signing services, web servers) so they load the patched library. Where immediate patching is infeasible, compensating controls include disabling or proxying S/MIME and CMS/PKCS#7 signature verification paths at the application boundary (e.g., turn off S/MIME verification in mail gateways at the cost of losing sender authentication), restricting which authenticated users or systems may submit PKCS#7 data, and adding pre-filters that reject malformed or oversized SignedData blobs before they reach PKCS7_verify() - none of these substitute for the upgrade and each materially reduces functionality.

More in OpenSSL

View all
CVE-2014-0160 HIGH POC
7.5 Apr 07

The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packe
CVE-2014-0195 MEDIUM POC
6.8 Jun 05

The dtls1_reassemble_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0
CVE-2014-0224 HIGH POC
7.4 Jun 05

OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCiph
CVE-2016-0800 MEDIUM POC
5.9 Mar 01

The SSLv2 protocol, as used in OpenSSL before 1.0.1s and 1.0.2 before 1.0.2g and other products, requires a server to se
CVE-2015-0204 MEDIUM POC
4.3 Jan 09

The ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k

CVE-2014-3566 LOW POC
3.4 Oct 15

The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which mak
CVE-2016-2107 MEDIUM POC
5.9 May 05

The AES-NI implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h does not consider memory allocation during a

CVE-2015-1793 MEDIUM POC
6.5 Jul 09

The X509_verify_cert function in crypto/x509/x509_vfy.c in OpenSSL 1.0.1n, 1.0.1o, 1.0.2b, and 1.0.2c does not properly

CVE-2022-3602 HIGH
7.5 Nov 01

A buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Rated hig
CVE-2014-3470 MEDIUM
4.3 Jun 05

The ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before
CVE-2017-3730 HIGH POC
7.5 May 04

In OpenSSL 1.1.0 before 1.1.0d, if a malicious server supplies bad parameters for a DHE or ECDHE key exchange then this

CVE-2016-8610 HIGH
7.5 Nov 13

A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL proto

Same weakness CWE-416 – Use After Free

View all
CVE-2019-0708 CRITICAL POC
9.8
CVE-2015-5119 CRITICAL POC
9.8
CVE-2014-0322 HIGH POC
8.8
CVE-2012-4792 HIGH POC
8.8
CVE-2009-4324 HIGH POC
7.8
CVE-2015-0313 CRITICAL POC
9.8
CVE-2015-5122 CRITICAL POC
9.8
CVE-2013-2551 HIGH POC
8.8

Same technique Information Disclosure

View all
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8
CVE-2023-7028 CRITICAL POC
10.0
CVE-2023-4966 HIGH POC
7.5

Vendor StatusVendor

SUSE

Severity: Important
Product Status
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS Affected
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS Affected
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS Affected
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS Affected
SUSE Linux Enterprise Live Patching 15 SP4 Affected

Share

EUVD-2026-35491 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy