Threats tagged 'ghsa-c8cg-36rg-65fq'

GnuPG version 2.5.21 for Windows has a vulnerability due to default DACL inheritance on the C:\ProgramData directory. This allows low-privilege users to create arbitrary subdirectories and inject malicious configuration files that GnuPG components will consume, potentially leading to code execution under the victim user's security context.