CVE-2019-9896: Opensuse Backports Sle

High severity, CVSS 7.8. EPSS: 0.8% chance of exploitation in the next 30 days.

In PuTTY versions before 0.71 on Windows, local attackers could hijack the application by putting a malicious help file in the same directory as the executable.

Affected products

• Opensuse Backports Sle: version 15.0 only
• Opensuse Leap: version 15.0 only
• Putty Putty: before 0.71 (fixed in 0.71)

Published 2019-03-21. Last modified 2026-06-17.