CVE-2026-115402

OpenVPN ovpn-dco-win 0.6.5 through 2.8.13 allows unprivileged local users to cause a denial of service system crash via a race condition in the TCP connect path...

CVE-2026-115402

OpenVPN ovpn-dco-win versions 0.6.5 through 2.8.13 are vulnerable to a denial of service (system crash). The root cause is a race condition located in the TCP connect path, which can be triggered by unprivileged local users. No specific remediation or exploit information is provided in the docume...

CVE-2026-82325

A use-after-free vulnerability in the OpenVPN ovpn-dco-win driver version 2.5.0 through 2.8.6 allows local authenticated users to cause a system crash via crafted control messages...

CVE-2026-82325

CVE-2026-82325 is a use-after-free vulnerability in the OpenVPN ovpn-dco-win driver, affecting versions 2.5.0 through 2.8.6 . A local authenticated user can trigger a system crash by sending crafted control messages to the driver. The CVSS 4.0 score is 6.8 (MEDIUM) , with a local attack vector, l...

CVE-2026-11604

An incorrect buffer size calculation in the epoch key generator in OpenVPN ovpn-dco-win version 2.0.0 through 2.8.3 allows a remote authenticated peer to trigger a heap-based buffer overflow and kernel memory corruption via a crafted data packet, resulting in a system crash denial of service...

CVE-2026-11604: Incorrect Calculation of Buffer Size

An incorrect buffer size calculation in the epoch key generator in OpenVPN ovpn-dco-win version 2.0.0 through 2.8.3 allows a remote authenticated peer to trigger a heap-based buffer overflow and kernel memory corruption via a crafted data packet, resulting in a system crash denial of service...

CVE-2025-50054

Buffer overflow in OpenVPN ovpn-dco-win version 1.3.0 and earlier and version 2.5.8 and earlier allows a local user process to send a too large control message buffer to the kernel driver resulting in a system crash...

CVE-2025-50054: Heap-based Buffer Overflow

Buffer overflow in OpenVPN ovpn-dco-win version 1.3.0 and earlier and version 2.5.8 and earlier allows a local user process to send a too large control message buffer to the kernel driver resulting in a system crash...

CVE-2024-5198

OpenVPN ovpn-dco for Windows version 1.1.1 allows an unprivileged local attacker to send I/O control messages with invalid data to the driver resulting in a NULL pointer dereference leading to a system halt...

CVE-2024-5198: NULL Pointer Dereference

OpenVPN ovpn-dco for Windows version 1.1.1 allows an unprivileged local attacker to send I/O control messages with invalid data to the driver resulting in a NULL pointer dereference leading to a system halt...