| CVE-2014-0160US | high7.5OT critical | 100.0% (100th) | KEV | ✗no fix | 2014-04-07 | 2 versions |
| CVE-2022-3786US | high7.5 | 92.5% (100th) | Exploit | ✓3.0.7 | 2022-11-01 | 3.0.0 → 3.0.7 |
| CVE-2022-3602US | high7.5 | 90.8% (100th) | Exploit | ✗no fix | 2022-11-01 | ≤ Fixed in OpenSSL 3.0.7 (Affected 3.0.0,3.0.1,3.0.2,3.0.3,3.0.4,3.0.5,3.0.6) |
| CVE-2022-1292US | high7.3 | 82.6% (100th) | Exploit | ✗no fix | 2022-05-03 | 3 versions |
| CVE-2025-15467US | — | 74.8% (100th) | Exploit | ✓3.6.1 | 2026-01-27 | 5 versions |
| CVE-2022-0778US | high7.5 | 73.2% (99th) | Exploit | ✗no fix | 2022-03-15 | 3 versions |
| CVE-2021-3449US | medium5.9 | 63.5% (99th) | Exploit | ✗no fix | 2021-03-25 | ≤ Fixed in OpenSSL 1.1.1k (Affected 1.1.1-1.1.1j) |
| CVE-2017-3730US | high7.5 | 55.3% (99th) | Exploit | ✗no fix | 2017-05-04 | 4 versions |
| CVE-2020-1967US | high7.5 | 53.3% (99th) | Exploit | ✗no fix | 2020-04-21 | ≤ Fixed in OpenSSL 1.1.1g (Affected 1.1.1d-1.1.1f) |
| CVE-2021-23840US | high7.5 | 50.7% (99th) | Exploit | ✗no fix | 2021-02-16 | 2 versions |
| CVE-2021-3712US | high7.4 | 50.4% (99th) | Exploit | ✗no fix | 2021-08-24 | 2 versions |
| CVE-2021-4044US | high7.5 | 50.1% (99th) | Exploit | ✗no fix | 2021-12-14 | ≤ Fixed in OpenSSL 3.0.1 (Affected 3.0.0) |
| CVE-2022-2274US | critical9.8 | 48.2% (99th) | Exploit | ✗no fix | 2022-07-01 | ≤ Affects OpenSSL 3.0.4 |
| CVE-2016-8610US | high7.5 | 39.7% (99th) | Exploit | ✗no fix | 2017-11-13 | 4 versions |
| CVE-2016-7054US | high7.5 | 32.4% (98th) | Exploit | ✗no fix | 2017-05-04 | 3 versions |
| CVE-2022-4304US | medium5.9 | 23.5% (98th) | Exploit | ✓3.0.8 | 2023-02-08 | 3 versions |
| CVE-2021-3450US | high7.4 | 18.3% (97th) | Exploit | ✗no fix | 2021-03-25 | ≤ Fixed in OpenSSL 1.1.1k (Affected 1.1.1h-1.1.1j) |
| CVE-2021-23841US | medium5.9OT elevated | 7.41% (94th) | Exploit | ✗no fix | 2021-02-16 | 2 versions |
| CVE-2020-1971US | medium5.9 | 6.99% (94th) | Exploit | ✗no fix | 2020-12-08 | 2 versions |
| CVE-2024-5535US | — | 5.58% (93rd) | Exploit | ✓3.3.2 | 2024-06-27 | 6 versions |
| CVE-2025-11187US | — | 5.23% (92nd) | Exploit | ✓3.4.4 | 2026-01-27 | 3 versions |
| CVE-2022-2097US | medium5.3OT elevated | 4.90% (92nd) | Exploit | ✗no fix | 2022-07-05 | 2 versions |
| CVE-2022-3358US | high7.5 | 4.01% (90th) | Exploit | ✗no fix | 2022-10-11 | ≤ Fixed in OpenSSL 3.0.6 (Affected 3.0.0-3.0.5) |
| CVE-2026-45447US | — | 4.00% (90th) | Exploit | ✓1.0.2zq | 2026-06-09 | 7 versions |
| CVE-2023-0464US | high7.5 | 3.98% (90th) | Exploit | ✓1.1.1u | 2023-03-22 | 4 versions |
| CVE-2025-69421US | high7.5 | 0.94% (61st) | Exploit | ✓3.3.6 | 2026-01-27 | 7 versions |
| CVE-2025-69420US | — | 0.92% (60th) | Exploit | ✓3.0.19 | 2026-01-27 | 6 versions |
| CVE-2024-13176US | — | 0.61% (49th) | Exploit | ✓1.1.1zb | 2025-01-20 | 7 versions |
| CVE-2025-69419US | — | 0.61% (49th) | Exploit | ✓3.3.6 | 2026-01-27 | 6 versions |
| CVE-2022-2068US | high7.3 | 96.4% (100th) | — | ✗no fix | 2022-06-21 | 3 versions |
| CVE-2021-3711US | critical9.8 | 87.8% (100th) | — | ✗no fix | 2021-08-24 | ≤ Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k) |
| CVE-2023-2650US | medium6.5 | 75.4% (100th) | — | ✓1.0.2zh | 2023-05-30 | 4 versions |
| CVE-2023-0286US | high7.4 | 69.3% (99th) | — | ✓1.1.1t | 2023-02-08 | 3 versions |
| CVE-2024-6119US | high7.5 | 66.6% (99th) | — | ✓3.1.7 | 2024-09-03 | 4 versions |
| CVE-2017-3731US | high7.5 | 57.3% (99th) | — | ✗no fix | 2017-05-04 | 15 versions |
| CVE-2024-2511US | — | 52.4% (99th) | — | ✓1.1.1y | 2024-04-08 | 4 versions |
| CVE-2018-0732US | high7.5 | 47.0% (99th) | — | ✗no fix | 2018-06-12 | 2 versions |
| CVE-2022-4450US | high7.5 | 28.6% (98th) | — | ✓3.0.8 | 2023-02-08 | 2 versions |
| CVE-2016-7053US | high7.5 | 21.7% (98th) | — | ✗no fix | 2017-05-04 | 3 versions |
| CVE-2018-0739US | medium6.5 | 18.6% (97th) | — | ✗no fix | 2018-03-27 | 2 versions |
| CVE-2019-1559US | medium5.9 | 17.1% (97th) | — | ✗no fix | 2019-02-27 | ≤ Fixed in OpenSSL 1.0.2r (Affected 1.0.2-1.0.2q) |
| CVE-2017-3732US | medium5.9 | 15.4% (97th) | — | ✗no fix | 2017-05-04 | 15 versions |
| CVE-2019-1551US | medium5.3 | 14.3% (97th) | — | ✗no fix | 2019-12-06 | 2 versions |
| CVE-2017-3733US | high7.5 | 12.9% (96th) | — | ✗no fix | 2017-05-04 | 5 versions |
| CVE-2018-0734US | medium5.9OT elevated | 12.2% (96th) | — | ✗no fix | 2018-10-30 | 3 versions |
| CVE-2018-0737US | medium5.9OT elevated | 11.6% (96th) | — | ✗no fix | 2018-04-16 | 2 versions |
| CVE-2018-0733US | medium5.9 | 8.28% (95th) | — | ✗no fix | 2018-03-27 | ≤ Fixed in OpenSSL 1.1.0h (Affected 1.1.0-1.1.0g) |
| CVE-2023-3446US | medium5.3 | 6.53% (94th) | — | ✓3.0.10 | 2023-07-19 | 4 versions |
| CVE-2019-1549US | medium5.3OT elevated | 6.18% (93rd) | — | ✗no fix | 2019-09-10 | ≤ Fixed in OpenSSL 1.1.1d (Affected 1.1.1-1.1.1c) |
| CVE-2024-9143US | — | 5.84% (93rd) | — | ✓3.3.3 | 2024-10-16 | 6 versions |