CVE-2026-82325

A use-after-free vulnerability in the OpenVPN ovpn-dco-win driver version 2.5.0 through 2.8.6 allows local authenticated users to cause a system crash via crafted control messages

  • Published Sep 7, 2026
  • CVSS 6.8 medium
  • 0.1% chance of exploitation in the next 30 days (EPSS)

Affected software

CVE-2026-82325 at the National Vulnerability Database