gnupg gnupg

Name: gnupg gnupg
Brand: gnupg

productUS

cpe:2.3:a:gnupg:gnupg:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

by severity

2critical11high19medium3low

updated 2026-10-28

vulnerabilities (35)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2006-3082US	medium5.0	7.31% (94th)	Exploit	no fix	2006-06-19	2 versions
CVE-2006-3746US	medium5.0	7.21% (94th)	Exploit	no fix	2006-07-28	= 1.4.4
CVE-2007-1263US	medium5.0	5.53% (93rd)	Exploit	no fix	2007-03-06	≤ 1.4.6
CVE-2018-12020US	high7.5	8.25% (95th)	—	2.2.8	2018-06-08	< 2.2.8
CVE-2014-9087US	high7.5	5.66% (93rd)	—	no fix	2014-12-01	= 2.1.0
CVE-2010-2547US	high8.1	5.34% (93rd)	—	no fix	2010-08-05	2.0.0 → 2.0.16
CVE-2013-4402US	medium5.0	5.03% (92nd)	—	no fix	2013-10-28	25 versions
CVE-2008-1530US	high9.3	4.30% (91st)	—	no fix	2008-03-27	2 versions
CVE-2016-6313US	medium5.3	3.60% (89th)	—	no fix	2016-12-13	≤ 1.4.14
CVE-2006-6169US	medium6.8	3.46% (89th)	—	no fix	2006-11-29	2 versions
CVE-2014-4617US	medium5.0	3.31% (88th)	—	no fix	2014-06-25	61 versions
CVE-2005-0366US	medium5.0	2.95% (87th)	—	1.4.1	2005-05-02	< 1.4.1
CVE-2012-6085US	medium5.8	2.91% (87th)	—	no fix	2013-01-24	27 versions
CVE-2022-34903US	medium6.5	2.84% (87th)	—	no fix	2022-07-01	≤ 2.3.6
CVE-2019-13050US	high7.5	2.52% (85th)	—	no fix	2019-06-29	≤ 2.2.16
CVE-2013-4351US	medium5.8	2.52% (85th)	—	no fix	2013-10-10	30 versions
CVE-2015-1607US	medium5.5	2.47% (84th)	—	2.0.27	2019-11-20	3 versions
CVE-2018-9234US	high7.5	1.96% (80th)	—	no fix	2018-04-04	2 versions
CVE-2015-0837US	medium5.9	1.95% (80th)	—	1.4.19	2019-11-29	< 1.4.19
CVE-2015-1606US	medium5.5	1.92% (80th)	—	2.1.2	2019-11-20	< 2.1.2
CVE-2026-24881US	critical9.8	1.81% (79th)	—	2.5.17	2026-01-27	2.5.13 → 2.5.17
CVE-2022-3515US	critical9.8	1.70% (77th)	—	2.4.0	2023-01-12	2 versions
CVE-2020-25125US	high7.8	1.28% (70th)	—	no fix	2020-09-03	2 versions
CVE-2011-2207US	medium5.3	1.20% (68th)	—	2.1.0	2019-11-27	< 2.1.0
CVE-2019-14855US	high7.5	1.08% (65th)	—	2.2.18	2020-03-20	< 2.2.18
CVE-2018-1000858US	high8.8	1.04% (64th)	—	no fix	2018-12-20	2.1.12 → 2.2.11
CVE-2014-3591US	medium4.2	0.60% (49th)	—	1.4.19	2019-11-29	< 1.4.19
CVE-2013-4242US	low1.9	0.53% (45th)	—	no fix	2013-08-19	77 versions
CVE-2026-24883US	medium5.5	0.49% (42nd)	—	2.5.17	2026-01-27	2.5.13 → 2.5.17
CVE-2013-4576US	low2.1	0.45% (39th)	—	no fix	2013-12-20	40 versions
CVE-2026-24882US	high7.8	0.44% (38th)	—	2.5.17	2026-01-27	2.5.13 → 2.5.17
CVE-2022-3219US	low3.3	0.29% (22nd)	—	no fix	2023-02-23	—
CVE-2025-30258US	medium4.7	0.19% (9th)	—	2.5.5	2025-03-19	2 versions
CVE-2025-68973US	high7.0	0.15% (4th)	—	no fix	2025-12-28	≤ 2.4.8
CVE-2025-68972US	medium4.7	0.11% (1st)	—	no fix	2025-12-27	≤ 2.4.8

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation7 CVEs
CWE-190Integer Overflow or Wraparound3 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor3 CVEs
CWE-121Stack-based Buffer Overflow2 CVEs
CWE-295Improper Certificate Validation2 CVEs
CWE-326Inadequate Encryption Strength2 CVEs
CWE-347Improper Verification of Cryptographic Signature2 CVEs
CWE-416Use After Free2 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE35 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan