Vulnerabilities

TI-2026-36117 CVE-2026-48852 · GHSA-rx8r-f2xx-98h9

PuTTY 0.71 before 0.84 has an assertion failure in ECDSA signature verification.

LOW 17

PuTTY 0.71 before 0.84 has an assertion failure in ECDSA signature verification.

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.00275 Published 2026-05-25 Fixed in 0.84 CWE-617

TI-2026-36116 CVE-2026-48851 · GHSA-5fwp-h8j4-xmhm

PuTTY 0.77 before 0.84 uses a copy of the PuTTY icon as a trust indication for TELNET…

LOW 15

PuTTY 0.77 before 0.84 uses a copy of the PuTTY icon as a trust indication for TELNET data but the trust status is not cleared between proxy authentication and the main session.

CVSS 3.1LOW 3.1 Network No auth User interaction EPSS 0.00224 Published 2026-05-25 Fixed in 0.84 CWE-451

TI-2026-36115 CVE-2026-48850 · GHSA-c27j-mcjp-93gg

PuTTY 0.72 before 0.84 has a double free in RSA KEX.

LOW 26

PuTTY 0.72 before 0.84 has a double free in RSA KEX.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.0032 Published 2026-05-25 Fixed in 0.84 CWE-415

Vulnerabilities

Filters

PuTTY 0.71 before 0.84 has an assertion failure in ECDSA signature verification.

PuTTY 0.77 before 0.84 uses a copy of the PuTTY icon as a trust indication for TELNET…

PuTTY 0.72 before 0.84 has a double free in RSA KEX.