Double Free in Openvpn Ovpn-Dco-Win
CVE-2026-82325
A use-after-free vulnerability in the OpenVPN ovpn-dco-win driver version 2.5.0 through 2.8.6 allows local authenticated users to cause a system crash via crafted control messages
Vulnerability class: Double Free
Affected products
Weakness classification (CWE)
References
- security@openvpn.net (vendor-advisory)