{"id":"CVE-2026-105390","published":"2026-10-13T23:17:26.470","lastModified":"2026-10-15T20:38:04.303","description":"Improper synchronization in the OpenVPN ovpn-dco-win for Windows versions 0.6.5 through 1.3.5 and 2.4.0 through 2.8.7 allows local attackers to trigger a deadlock via a crafted write to the ovpn-dco device, causing the host to become unresponsive.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-413","CWE-833"],"vendors":[],"products":[],"references":[{"url":"https://community.openvpn.net/Security%20Announcements/CVE-2026-105390","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}