PU
Product
PuTTY
by Putty · last CVE May 25, 2026
36
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 8Medium 4Low 3
Watch

Add PuTTY to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2019-17067
9.8
2%
Oct 1
PuTTY before 0.73 on Windows improperly opens port-forwarding listening sockets, which allows attackers to listen on the same port to steal an incoming connection
Affected: before 0.73
CVE-2019-9898
9.8
4%
Mar 21
Potential recycling of random numbers used in cryptography exists within PuTTY before 0.71
Affected: before 0.71
CVE-2019-9895
9.8
2%
Mar 21
In PuTTY versions before 0.71 on Unix, a remotely triggerable buffer overflow exists in any kind of server-to-client forwarding
Affected: before 0.71
CVE-2017-6542
9.8
22%
Mar 27
The ssh_agent_channel_data function in PuTTY before 0.68 allows remote attackers to have unspecified impact via a large length value in an agent protocol message and leveraging…
Affected: through 0.67
Showing 4