CVE-2026-48850
3.7 LOWPuTTY 0.72 before 0.84 has a double free in RSA KEX
Published: 2026-05-25 · Last updated: 2026-05-27
Severity and scoring
- CVSS
- 3.7 LOW
- Vector
- CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
- CWE
- CWE-415
Affected products
| Vendor | Product |
|---|---|
| putty | putty |
Description
PuTTY 0.72 before 0.84 has a double free in RSA KEX.
Source: NVD
References
Related CVEs
Same vendor
- CVE-2026-48852 — PuTTY 0.71 before 0.84 has an assertion failure in ECDSA signature verification (3.7 LOW)
- CVE-2026-48851 — PuTTY 0.77 before 0.84 uses a copy of the PuTTY icon as a trust indication for TELNET data but the trust status is not cleared between pr... (3.1 LOW)
- CVE-2026-4115 — A vulnerability was detected in PuTTY 0.83 (3.7 LOW)
Same CWE
- CVE-2026-35188 — Issue summary: A malicious server can exploit TLS OCSP stapling by delivering a crafted response through the status_request extension, tr... (5.0 MEDIUM)
- CVE-2026-45324 — Rizin is a UNIX-like reverse engineering framework and command-line toolset (3.3 LOW)
- CVE-2026-44422 — FreeRDP is a free implementation of the Remote Desktop Protocol (7.5 HIGH)
- CVE-2026-46189 — In the Linux kernel, the following vulnerability has been resolved: RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error pa... (7.8 HIGH)
- CVE-2026-46183 — In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs-schemes: protect path kfree() with damon_sysfs_lock ... (7.8 HIGH)