Microsoft Found OpenVPN Bugs That can be Chained to Achieve RCE and LPE

The vulnerabilities affect all versions of OpenVPN prior to 2.6.10 and 2.5.10. Attackers could gain full control over targeted endpoints by exploiting these vulnerabilities.