CVE-2019-6690-python-gnupg-vulnerability

CVE-2019-6690: Improper Input Validation in python-gnupg 0.4.3 We discovered a way to inject data trough the passphrase property of the gnupg.GPG.encrypt and gnupg.GPG.decrypt methods when symmetric encryption is used. The supplied passphrase is not validated for newlines, and the library passes...

VSHG

VSHG - Hardware resistance & enhanced security for GnuPG. VSHG aims to provide a memory / hardware resistant reinforcement to GnuPG's standared s2k key-derivation-function + a simplified interface for symmetric encryption . About VSHG VSHG Very secure hash generator is a standalone Addon for GnuP...

CVE-2019-6690

Summary It is a simple PoC of Improper Input Validation in python-gnupg 0.4.3 CVE-2019-6690. Vulnerable python python-gnupg 0.4.3 python python-gnupg 0.3.6 python python-gnupg 0.3.5 python python-gnupg 0.3.4 Mitigation Users should upgrade to 0.4.4 Test Environment Docker Image docker pull...

CVE-2026-118131

A flaw was found in GnuPG for Windows. Insecure default Discretionary Access Control List DACL permissions allow low-privileged local users to create subdirectories under the shared program data directory. A local attacker can exploit this issue by pre-creating the expected configuration director...

[SECURITY] Fedora 43 Update: rust-sequoia-chameleon-gnupg-0.13.1-20.fc43

Sequoia's reimplementation of the GnuPG interface...

[SECURITY] Fedora 44 Update: rust-sequoia-chameleon-gnupg-0.13.1-20.fc44

Sequoia's reimplementation of the GnuPG interface...

[SECURITY] Fedora 45 Update: rust-sequoia-chameleon-gnupg-0.13.1-20.fc45

Sequoia's reimplementation of the GnuPG interface...

CVE-2026-118131

GnuPG version 2.5.21 for Windows contains a vulnerability where default Discretionary Access Control List DACL inheritance on the C:\ProgramData directory allows members of the BUILTIN\Users group to create arbitrary subdirectories under this path. An attacker with low-privilege access can create...

Linux Distros Unpatched Vulnerability : CVE-2026-118131

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GnuPG version 2.5.21 for Windows contains a vulnerability where default Discretionary Access Control List DACL inheritance on the C:\ProgramData directory allow...

CVE-2026-118131

GnuPG version 2.5.21 for Windows contains a vulnerability where default Discretionary Access Control List DACL inheritance on the C:\ProgramData directory allows members of the BUILTIN\Users group to create arbitrary subdirectories under this path. An attacker with low-privilege access can create...

AZL-111956 CVE-2026-118131 affecting package gnupg2 2.4.9-3

GnuPG version 2.5.21 for Windows contains a vulnerability where default Discretionary Access Control List DACL inheritance on the C:\ProgramData directory allows members of the BUILTIN\Users group to create arbitrary subdirectories under this path. An attacker with low-privilege access can create...

CVE-2026-118131

GnuPG version 2.5.21 for Windows contains a vulnerability where default Discretionary Access Control List DACL inheritance on the C:\ProgramData directory allows members of the BUILTIN\Users group to create arbitrary subdirectories under this path. An attacker with low-privilege access can create...

UBUNTU-CVE-2026-118131

GnuPG version 2.5.21 for Windows contains a vulnerability where default Discretionary Access Control List DACL inheritance on the C:\ProgramData directory allows members of the BUILTIN\Users group to create arbitrary subdirectories under this path. An attacker with low-privilege access can create...

EUVD-2026-111235

GnuPG version 2.5.21 for Windows contains a vulnerability where default Discretionary Access Control List DACL inheritance on the C:\ProgramData directory allows members of the BUILTIN\Users group to create arbitrary subdirectories under this path. An attacker with low-privilege access can create...

CVE-2026-118131

GnuPG version 2.5.21 for Windows contains a vulnerability where default Discretionary Access Control List DACL inheritance on the C:\ProgramData directory allows members of the BUILTIN\Users group to create arbitrary subdirectories under this path. An attacker with low-privilege access can create...

CVE-2026-118131

GnuPG (version 2.5.21) for Windows is vulnerable to a security flaw where the default Discretionary Access Control List (DACL) inheritance on the C:\ProgramData directory allows members of the BUILTIN\Users group to create arbitrary subdirectories. A low-privilege attacker can exploit this by cre...

CVE-2026-118131 CVE-2026-118131

GnuPG version 2.5.21 for Windows contains a vulnerability where default Discretionary Access Control List DACL inheritance on the C:\ProgramData directory allows members of the BUILTIN\Users group to create arbitrary subdirectories under this path. An attacker with low-privilege access can create...

CVE-2026-118131: Undefined Security Weakness

GnuPG version 2.5.21 for Windows contains a vulnerability where default Discretionary Access Control List DACL inheritance on the C:\ProgramData directory allows members of the BUILTIN\Users group to create arbitrary subdirectories under this path. An attacker with low-privilege access can create...

PT-2026-126709

Name of the Vulnerable Software and Affected Versions GnuPG version 2.5.21 Description On Windows, the software inherits a permissive default Discretionary Access Control List DACL—a security feature that controls which users or groups have access to specific objects—on the C:ProgramData director...

gnupg permission and access control issues vulnerability

GNU gnupg version 2.5.21 contains a vulnerability related to permission escalation and access control. This issue arises because the default DACL inheritance in the Windows C:\ProgramData directory permits BUILTIN\Users members to create arbitrary subdirectories. Low-privilege attackers can thus...