Gpg4win vulnerabilities
We track 2 vulnerabilities in Gpg4win products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on January 27, 2026.
2vulnerabilities
2critical
0high
0exploited
9.8average CVSS score
Latest Gpg4win vulnerabilities
- 9.8 Critical severity
GnuPG: Stack-based Buffer Overflow
In GnuPG before 2.5.17, a crafted CMS (S/MIME) EnvelopedData message carrying an oversized wrapped session key can cause a stack-based buffer overflow in gpg-agent during PKDECRYPT--kem=CMS handling. This can easily be leveraged for denial of service; however,
- 9.8 Critical severity
libksba: Integer Overflow or Wraparound
A vulnerability was found in the Libksba library due to an integer overflow within the CRL parser. The vulnerability can be exploited remotely for code execution on the target system by passing specially crafted data to the application, for example, a maliciou