CVE-2026-118131

CriticalCVSS 9.8/10Last modified Nov 4, 2026

Description

GnuPG (version 2.5.21) for Windows contains a vulnerability where default Discretionary Access Control List (DACL) inheritance on the C:\ProgramData directory allows members of the BUILTIN\Users group to create arbitrary subdirectories under this path. An attacker with low-privilege access can create the expected GnuPG configuration directory and inject malicious configuration files consumed by GnuPG components. This can result in code execution within the security context of the victim user.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-379CWE-427CWE-732

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
GnuPGGnuPG2.5.21

References

Timeline

Published
Oct 27, 2026
Last modified
Nov 4, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-1181326.1NextChat version 2.16.1 contains a client‑side cross‑site scripting (XSS) vulnerability in the Plugin Editor due to unsafe rendering of exteCVE-2026-1181377.8Improper authorization in Windows FTP Service allows an authorized attacker to elevate privileges locally.CVE-2026-1181387.8Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Client for NFS allows an authorized aCVE-2026-118146.8A command injection vulnerability in the listed NETGEAR models allows a network-adjacent attacker with the ability to intercept and modify lCVE-2026-1181405.5Improper access control in Windows Server for NFS allows an authorized attacker to disclose information locally.CVE-2026-1181418.8Stack-based buffer overflow in Windows Client for NFS allows an unauthorized attacker to execute code over a network.CVE-2026-1181427.8Out-of-bounds read in Windows Distributed File System (DFS) allows an authorized attacker to elevate privileges locally.CVE-2026-1181436.8Out-of-bounds read in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack.CVE-2026-1181446.6Heap-based buffer overflow in Windows Smart Card allows an authorized attacker to elevate privileges with a physical attack.CVE-2026-1181457.5Use after free in Windows Function Discovery SSDP Provider allows an unauthorized attacker to execute code over an adjacent network.CVE-2026-1181468.8Incorrect authorization in Active Directory Domain Services allows an authorized attacker to execute code over a network.CVE-2026-1181477.4Improper certificate validation in Visual Studio allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-118131: Critical severity, CVSS 9.8 | Vulnix