Skip to content
OpenAdvisories

Product · Microsoft

vcpkg

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.8
    CVE-2026-34054

    openssl on Windows built with openssldir set from the build machine (Uncontrolled Search Path Element)

    vcpkg is a free and open-source C/C++ package manager. Prior to version 3.6.1#3, vcpkg's Windows builds of OpenSSL set openssldir to a path on the build machine, making that path be attackable later on customer machines. This issue has been patched in version…

    Microsoft vcpkg