OpenSSL Patches High-Severity Vulnerability Found With AI
Source SecurityWeek
Mentioned vulnerabilities
Rated by Threat Radar
Data as of 9 Jun 2026, 16:56 UTC
What to do
AI-suggested
Apply the latest OpenSSL releases that include patches for these 18 vulnerabilities, including CVE-2026-45447. Since this is a software vulnerability in OpenSSL libraries, upgrading to the fixed versions is the recommended and effective mitigation. Patch status is confirmed by the vendor's official releases. No additional vendor advisory indicates alternative mitigations or that no action is required.
Description
OpenSSL released patches for 18 vulnerabilities, including a high-severity heap use-after-free flaw (CVE-2026-45447) in PKCS#7 signature verification. This vulnerability can be triggered by specially crafted PKCS#7 or S/MIME signed messages and may lead to heap corruption, crashes, or remote code execution. Additional moderate and low-severity flaws allow decryption, forgery, DoS, authentication bypass, and potential code execution. Some vulnerabilities were discovered with AI assistance. High-severity OpenSSL flaws are rare, making this patch critical.