OpenVPN OpenVPN GUI

• CVE-2024-5198 Low 3.3 OpenVPN ovpn-dco for Windows version 1.1.1 allows an unprivileged local attacker to send I/O control messages with invalid data to the driver resulting in a NULL pointer dereference leading to a syste 0.1%
• CVE-2024-1305 Critical 9.8 tap-windows6 driver version 9.26 and earlier does not properly check the size data of incomming write operations which an attacker can use to overflow memory buffers, resulting in a bug check and po 15.4%
• CVE-2024-27459 High 7.2 The interactive service in OpenVPN 2.6.9 and earlier allows an attacker to send data causing a stack overflow which can be used to execute arbitrary code with more privileges. 8.3%