GPG4WIN
1 CVEs tracked since 2009. Since Oct 2009, none of them reached CISA KEV.
GPG4WIN CVEs per month
| Month | CVEs | In CISA KEV |
|---|---|---|
| 2009-10 | 1 | 0 |
Products
The products that kept showing up in GPG4WIN's monthly top three, with their CVEs summed over those months.
Latest CVEs
The 7 most recently published vulnerabilities affecting GPG4WIN.
- CVE-2026-24883In GnuPG before 2.5.17, a long signature packet length causes parse_signature to return success with sig->data[] set to a NULL value, leading to a denial of service (application crash).3.7
- CVE-2026-24882In GnuPG before 2.5.17, a stack-based buffer overflow exists in tpm2daemon during handling of the PKDECRYPT command for TPM-backed RSA and ECC keys.8.4
- CVE-2026-24881In GnuPG before 2.5.17, a crafted CMS (S/MIME) EnvelopedData message carrying an oversized wrapped session key can cause a stack-based buffer overflow in gpg-agent during PKDECRYPT--kem=CMS handlin...8.1
- CVE-2022-3515A vulnerability was found in the Libksba library due to an integer overflow within the CRL parser. The vulnerability can be exploited remotely for code execution on the target system by passing spe...9.8
- CVE-2020-25125GnuPG 2.2.21 and 2.2.22 (and Gpg4win 3.1.12) has an array overflow, leading to a crash or possibly unspecified other impact, when a victim imports an attacker's OpenPGP key, and this key has AEAD p...7.8
- CVE-2009-3805gpg2.exe in Gpg4win 2.0.1, as used in KDE Kleopatra 2.0.11, allows remote attackers to cause a denial of service (application crash) via a long certificate signature.4.3
- CVE-2006-6235A "stack overwrite" vulnerability in GnuPG (gpg) 1.x before 1.4.6, 2.x before 2.0.2, and 1.9.0 through 1.9.95 allows attackers to execute arbitrary code via crafted OpenPGP packets that cause GnuPG...10.0
The record
- Peak rank
- #110 in Oct 2009
- Busiest month shown
- Oct 2009, 1 CVEs
- Months with a KEV entry
- 0 since Oct 2009
- Monthly snapshots
- 1 since 2009