Search: CVE-2026-28387

Multiple vulnerabilities including use-after-free, NULL pointer dereferences, heap buffer overflow, and incorrect failure handling were identified in OpenSSL 3 components such as DANE client code and cryptographic operations. These issues affect OpenSSL 3 versions distributed by SUSE and have been assigned CVE identifiers CVE-2026-28387, CVE-2026-28388, CVE-2026-28389, CVE-2026-31789, and CVE-2026-31790. The severity is rated high. A security update addressing these vulnerabilities has been released.