Known Vulnerabilities for products from Gpg4win
Listed below are 6 of the newest known vulnerabilities associated with the vendor "Gpg4win".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-24882 json | In GnuPG before 2.5.17, a stack-based buffer overflow exists in tpm2daemon during handling of the PKDECRYPT command for TPM-b... | Not Provided | 2026-01-27 | 2026-06-30 |
| CVE-2026-24881 json | In GnuPG before 2.5.17, a crafted CMS (S/MIME) EnvelopedData message carrying an oversized wrapped session key can cause a st... | Not Provided | 2026-01-27 | 2026-06-30 |
| CVE-2022-3515 json | A vulnerability was found in the Libksba library due to an integer overflow within the CRL parser. The vulnerability can be e... | 9.8 - CRITICAL | 2023-01-12 | 2023-07-06 |
| CVE-2020-25125 json | GnuPG 2.2.21 and 2.2.22 (and Gpg4win 3.1.12) has an array overflow, leading to a crash or possibly unspecified other impact, ... | 7.8 - HIGH | 2020-09-03 | 2020-09-11 |
| CVE-2009-3805 json | gpg2.exe in Gpg4win 2.0.1, as used in KDE Kleopatra 2.0.11, allows remote attackers to cause a denial of service (application... | Not Provided | 2009-10-27 | 2026-04-23 |
| CVE-2006-6235 json | A "stack overwrite" vulnerability in GnuPG (gpg) 1.x before 1.4.6, 2.x before 2.0.2, and 1.9.0 through 1.9.95 allows attacker... | Not Provided | 2006-12-07 | 2026-04-23 |
Known software with vulnerabilities from Gpg4win
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Gpg4win | Gpg4win | - |