Skip to content
OpenAdvisories
Medium · 6.8 CVE-2026-82325 EUVD-2026-72348GHSA-pc42-rjrj-cj9w

A use-after-free vulnerability in the OpenVPN ovpn-dco-win driver version 2.5.0 through 2.8.6 allows local authenticated users to cause a s…

Published Sep 7, 2026 · Updated Sep 8, 2026 · Assigned by OpenVPN

Description

A use-after-free vulnerability in the OpenVPN ovpn-dco-win driver version 2.5.0 through 2.8.6 allows local authenticated users to cause a system crash via crafted control messages

Affected products

VendorProductAffectedFixed
OpenVPN ovpn-dco-win 2.5.0 – ≤ 2.8.6 —

References