Gpg4win is a narrowly scoped encryption and key-management suite that brings OpenPGP and S/MIME capabilities to Windows desktops, occupying a critical role in secure communications despite its small product footprint. Its vulnerability profile skews strongly toward critical-severity outcomes and frequently acquires public exploit code, with exposure recurs through memory-safety weaknesses including stack-based buffer overflows, classic buffer overflows, integer overflows, and NULL-pointer dereferences that are characteristic of C-based cryptographic implementations. Defenders should treat advisories for this vendor as high-priority given the sensitive nature of the encrypted data it protects and the memory-corruption attack surface; live severity and exploitation counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Gpg4win over time
Signals from CVEs in this vendor scope (7 CVEs).
7 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2026-24881CRITICAL In GnuPG before 2.5.17, a crafted CMS (S/MIME) EnvelopedData message carrying an oversized wrapped session key can cause a stack-based buffer overflow in gpg-agent during PKDECRYPT | Jan 27, 2026 | 9.8 | 36 | NO | NO |
CVE-2026-24882HIGH In GnuPG before 2.5.17, a stack-based buffer overflow exists in tpm2daemon during handling of the PKDECRYPT command for TPM-backed RSA and ECC keys. | Jan 27, 2026 | 7.8 | 32 | NO | NO |
CVE-2022-3515CRITICAL A vulnerability was found in the Libksba library due to an integer overflow within the CRL parser. The vulnerability can be exploited remotely for code execution on the target syst | Jan 12, 2023 | 9.8 | 32 | NO | NO |
CVE-2006-6235HIGH A "stack overwrite" vulnerability in GnuPG (gpg) 1.x before 1.4.6, 2.x before 2.0.2, and 1.9.0 through 1.9.95 allows attackers to execute arbitrary code via crafted OpenPGP packets | Dec 7, 2006 | 10.0 | 26 | NO | NO |
CVE-2020-25125HIGH GnuPG 2.2.21 and 2.2.22 (and Gpg4win 3.1.12) has an array overflow, leading to a crash or possibly unspecified other impact, when a victim imports an attacker's OpenPGP key, and th | Sep 3, 2020 | 7.8 | 25 | NO | NO |
CVE-2026-24883MEDIUM In GnuPG before 2.5.17, a long signature packet length causes parse_signature to return success with sig->data[] set to a NULL value, leading to a denial of service (application cr | Jan 27, 2026 | 5.5 | 21 | NO | NO |
CVE-2009-3805MEDIUM gpg2.exe in Gpg4win 2.0.1, as used in KDE Kleopatra 2.0.11, allows remote attackers to cause a denial of service (application crash) via a long certificate signature. | Oct 27, 2009 | 4.3 | 21 | NO | YES |
Signals from CVEs in this vendor scope (7 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Gpg4win.
Media articles that mention a CVE ID that affects a product developed by Gpg4win — matched by CVE ID, not by vendor name.