PuTTY

Products

ProductCVEsExploitedLatest
PuTTY3–May 25, 2026

Exploited and recent CVEs

  • CVE-2026-48852 Low 3.7 PuTTY 0.71 before 0.84 has an assertion failure in ECDSA signature verification. 0.3%
  • CVE-2026-48851 Low 3.1 PuTTY 0.77 before 0.84 uses a copy of the PuTTY icon as a trust indication for TELNET data but the trust status is not cleared between proxy authentication and the main session. 0.2%
  • CVE-2026-48850 Low 3.7 PuTTY 0.72 before 0.84 has a double free in RSA KEX. 0.3%