CVE-2026-118131

GnuPG version 2.5.21 for Windows contains a vulnerability where default Discretionary Access Control List DACL inheritance on the C:\ProgramData directory allows members of the BUILTIN\Users group to create arbitrary subdirectories under this path. An attacker with low-privilege access can create...

CVE-2026-118131

GnuPG version 2.5.21 for Windows contains a vulnerability where default Discretionary Access Control List DACL inheritance on the C:\ProgramData directory allows members of the BUILTIN\Users group to create arbitrary subdirectories under this path. An attacker with low-privilege access can create...

EUVD-2026-111235

GnuPG version 2.5.21 for Windows contains a vulnerability where default Discretionary Access Control List DACL inheritance on the C:\ProgramData directory allows members of the BUILTIN\Users group to create arbitrary subdirectories under this path. An attacker with low-privilege access can create...

CVE-2026-118131

GnuPG version 2.5.21 for Windows is vulnerable to a security flaw caused by default Discretionary Access Control List (DACL) inheritance on the C:\ProgramData directory. This allows members of the BUILTIN\Users group to create arbitrary subdirectories within that path. A low-privilege attacker ca...

CVE-2026-118131 CVE-2026-118131

GnuPG version 2.5.21 for Windows contains a vulnerability where default Discretionary Access Control List DACL inheritance on the C:\ProgramData directory allows members of the BUILTIN\Users group to create arbitrary subdirectories under this path. An attacker with low-privilege access can create...

PT-2026-126709

GnuPG version 2.5.21 for Windows contains a vulnerability where default Discretionary Access Control List DACL inheritance on the C:ProgramData directory allows members of the BUILTINUsers group to create arbitrary subdirectories under this path. An attacker with low-privilege access can create t...

CVE-2026-43490

The CVE-2026-43490 entry concerns the Linux kernel ksmbd SMB server. The flaw arises in smb_inherit_dacl() where the code validates a fixed SID header but not the variable-length SID described by sid.num_subauth, allowing a malformed inheritable ACE to advertise more subauthorities than present. ...

DEBIAN-CVE-2023-52755

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix slab out of bounds write in smbinheritdacl slab out-of-bounds write is caused by that offsets is bigger than pntsd allocation size. This patch add the check to validate 3 offsets using allocation size...