Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-5wv8-4q5c-4fev
Vulnerability ID VCID-5wv8-4q5c-4fev
Aliases CVE-2021-3606
Summary OpenVPN before version 2.5.3 on Windows allows local users to load arbitrary dynamic loadable libraries via an OpenSSL configuration file if present, which allows the user to run arbitrary code with the same privilege level as the main OpenVPN process (openvpn.exe).
Status Published
Exploitability None
Weighted Severity None
Risk None
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
epss 0.00047 https://api.first.org/data/v1/epss?cve=CVE-2021-3606
epss 0.00047 https://api.first.org/data/v1/epss?cve=CVE-2021-3606
epss 0.00047 https://api.first.org/data/v1/epss?cve=CVE-2021-3606
epss 0.00047 https://api.first.org/data/v1/epss?cve=CVE-2021-3606
epss 0.00047 https://api.first.org/data/v1/epss?cve=CVE-2021-3606
epss 0.00047 https://api.first.org/data/v1/epss?cve=CVE-2021-3606
epss 0.00047 https://api.first.org/data/v1/epss?cve=CVE-2021-3606
epss 0.00047 https://api.first.org/data/v1/epss?cve=CVE-2021-3606
epss 0.00047 https://api.first.org/data/v1/epss?cve=CVE-2021-3606
epss 0.00047 https://api.first.org/data/v1/epss?cve=CVE-2021-3606
epss 0.00047 https://api.first.org/data/v1/epss?cve=CVE-2021-3606
epss 0.00047 https://api.first.org/data/v1/epss?cve=CVE-2021-3606
epss 0.00047 https://api.first.org/data/v1/epss?cve=CVE-2021-3606
epss 0.00047 https://api.first.org/data/v1/epss?cve=CVE-2021-3606
epss 0.00047 https://api.first.org/data/v1/epss?cve=CVE-2021-3606
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2021-3606
No exploits are available.
There are no known vectors.
Exploit Prediction Scoring System (EPSS)
Percentile 0.14488
EPSS Score 0.00047
Published At April 1, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-04-01T18:11:40.874633+00:00 EPSS Importer Import https://epss.cyentia.com/epss_scores-current.csv.gz 38.0.0