UNKNOWN NVD

CVE-2026-118131

GnuPG (version 2.5.21) for Windows contains a vulnerability where default Discretionary Access Control List (DACL) inheritance on the C:\ProgramData directory a

GnuPG (version 2.5.21) for Windows contains a vulnerability where default Discretionary Access Control List (DACL) inheritance on the C:\ProgramData directory allows members of the BUILTIN\Users group to create arbitrary subdirectories under this path. An attacker with low-privilege access can create the expected GnuPG configuration directory and inject malicious configuration files consumed by GnuPG components. This can result in code execution within the security context of the victim user.

References

https://atos.net/en/lp/cybershield/a-tale-of-several-hijacks-and-what-it-taught-me-about-r

Published: 2026-10-27 · Source: NVD · Feed updated: 2026-10-27

This unknown severity vulnerability was published on 2026-10-27 via NVD.

vulnfeed aggregates 18943 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.