CVE-2026-48850CWE-415

PuTTY 0.72 before 0.84 has a double free in RSA KEX

Low · published May 25, 2026

CVSS v3.1

3.7

EPSS

0%

Percentile

34.4

In the wild

Unconfirmed

What it is

PuTTY 0.72 before 0.84 has a double free in RSA KEX.

The record

Technical detail

CVSS v3.1: 3.7 · LOW
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0: Not supplied
EPSS: 0.00412 · 34.4th percentile
Weakness: CWE-415 · Double Free
Published: 2026-05-25T20:13Z

EPSS history

Timeline

25 MAY 20:13Z
PuTTY 0.72 before 0.84 has a double free in RSA KEX
cvelistv5