CVE-2009-0681: Pgp Desktop

High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days.

PGP Desktop before 9.10 allows local users to (1) cause a denial of service (crash) via a crafted IOCTL request to pgpdisk.sys, and (2) cause a denial of service (crash) and execute arbitrary code via a crafted IRP in an IOCTL request to pgpwded.sys.

Affected products

• Pgp Desktop: up to and including 9.9.0; version 8.0 only; version 9.0 only; version 9.0.6 only

Published 2009-04-15. Last modified 2026-06-16.