Home A - Z
Page Index

An Otter Wiki

Commit 8b52c4

2026-09-03 15:16:04 uddr: 2.7.7 release cve updates
Security Announcements.md ..
@@ 3,6 3,13 @@
This page lists all security announcements made by the OpenVPN project.
# Announcements
+ * [CVE-2026-84732 - Unbounded reliable TLS timeout and acks for non-outstanding packets](./CVE-2026-84732) (September 2026)
+ * [CVE-2026-84256 - Windows CreateProcess() command line quoting bypass via cmd.exe metacharacters](./CVE-2026-84256) (September 2026)
+ * [CVE-2026-84226 - Windows tapctl binary planting via netsh.exe called without full path](./CVE-2026-84226) (September 2026)
+ * [CVE-2026-82312 - Windows local DoS via NULL DACL on service exit event and netsh guard semaphore](./CVE-2026-82312) (September 2026)
+ * [CVE-2026-81738 - Windows single-byte overflow in write_dhcp_search_str() temp buffer](./CVE-2026-81738) (September 2026)
+ * [CVE-2026-78221 - Windows openvpnserv buffer overread via UTF8 IDN NRPT domains](./CVE-2026-78221) (September 2026)
+ * [CVE-2026-78043 - Windows openvpnserv config path validation bypass using '/' separator](./CVE-2026-78043) (September 2026)
* [CVE-2026-63650 - mbedTLS backend ignores x509-username-field](./CVE-2026-63650) (August 2026)
* [CVE-2026-63649 - Windows interactive service arbitrary config load bypass](./CVE-2026-63649) (August 2026)
* [CVE-2026-13379 - Windows interactive service DNS SearchList state pollution](./CVE-2026-13379) (July 2026)
0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9