CVE-2026-105390
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
Improper synchronization in the OpenVPN ovpn-dco-win for Windows versions 0.6.5 through 1.3.5 and 2.4.0 through 2.8.7 allows local attackers to trigger a deadlock via a crafted write to the ovpn-dco device, causing the host to become unresponsive.
| CWE | CWE-413 CWE-833 |
| Vendor | openvpn |
| Product | ovpn-dco-win |
| Published | Oct 13, 2026 |
Stay Ahead of the Next One
Get instant alerts for openvpn ovpn-dco-win
Be the first to know when new unknown vulnerabilities affecting openvpn ovpn-dco-win are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
OpenVPN / ovpn-dco-win
0.6.5 ≤ 1.3.5 2.4.0 ≤ 2.8.7