Openvpn Ovpn Dco Win vulnerabilities
6 vulnerabilities
Known vulnerabilities in Openvpn Ovpn Dco Win, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2026-105390openvpnovpn-dco-win
EPSS score0.11%
Improper synchronization in the OpenVPN ovpn-dco-win for Windows versions 0.6.5 through 1.3.5 and 2.4.0 through 2.8.7 allows local attackers to trigger a deadlock via a crafted write to the ovpn-dco device, causing the host to become unresponsive.CVE-2025-50054openvpnovpn-dco-winEPSS score0.24%
Buffer overflow in OpenVPN ovpn-dco-win version 1.3.0 and earlier and version 2.5.8 and earlier allows a local user process to send a too large control message buffer to the kernel driver resulting in a system crashCVE-2024-5198openvpnopenvpn-gui+2EPSS score0.14%
OpenVPN ovpn-dco for Windows version 1.1.1 allows an unprivileged local attacker to send I/O control messages with invalid data to the driver resulting in a NULL pointer dereference leading to a system halt.CVE-2026-2738openvpnovpn-dco-winEPSS score0.15%
Buffer overflow in ovpn‑dco‑win version 2.8.0 allows local attackers to cause a system crash by sending too large packets to the remote peer when the AEAD tag appears at the end of the encrypted packetCVE-2026-11604openvpnovpn-dco-winEPSS score0.34%
An incorrect buffer size calculation in the epoch key generator in OpenVPN ovpn-dco-win version 2.0.0 through 2.8.3 allows a remote authenticated peer to trigger a heap-based buffer overflow and kernel memory corruption via a crafted data packet, resulting in a system crash (denial of service).CVE-2026-82325openvpnovpn-dco-winEPSS score0.14%
A use-after-free vulnerability in the OpenVPN ovpn-dco-win driver version 2.5.0 through 2.8.6 allows local authenticated users to cause a system crash via crafted control messages