Sploitus

14 exploited vulnerabilities in Kitty

Vulnerabilities with publicly known exploits

Vendors
Kitty, Linux Mint, Canonical, Suse, Alt Linux, Ninescapital
With known exploits
14
Affected 9bis Kitty versions
≤ 0.66.6.3, 0.76.1.13
Affected Simon Tatham Putty versions
≤ 0.66

Vulnerabilities with exploits

Highest CVSS first — 4 of these already have exploit code on Sploitus

CVE-2026-33642
CVSS 9.9 CRITICAL 2026-05-19FIX AVAILABLE
CVE-2020-35605
CVSS 9.8 CRITICAL 2020-11-29FIX AVAILABLE
CVE-2016-2563 4 exploits
CVSS 9.8 CRITICAL 2016-03-05FIX AVAILABLE
Putty pscp 0.66 - Stack Buffer OverwritePutty pscp 0.66 - Stack Buffer Overwrite
CVE-2026-42850
CVSS 8.8 HIGH 2026-06-12FIX AVAILABLE
CVE-2026-33633
CVSS 8.8 HIGH 2026-05-19FIX AVAILABLE
CVE-2026-54057
CVSS 7.8 HIGH 2026-06-12FIX AVAILABLE
CVE-2026-42851
CVSS 7.8 HIGH 2026-06-12FIX AVAILABLE
CVE-2025-43929
CVSS 7.8 HIGH 2025-03-20FIX AVAILABLE
CVE-2024-25004 2 exploits
CVSS 7.8 HIGH 2024-02-09
KiTTY 0.76.1.13 - Start Duplicated Session Username Buffer Overflow ExploitKiTTY 0.76.1.13 - 'Start Duplicated Session Username' Buffer Overflow
CVE-2024-25003 2 exploits
CVSS 7.8 HIGH 2024-02-09
KiTTY 0.76.1.13 - Start Duplicated Session Hostname Buffer Overflow ExploitKiTTY 0.76.1.13 - 'Start Duplicated Session Hostname' Buffer Overflow
CVE-2024-23749 4 exploits
CVSS 7.8 HIGH 2024-01-08
KiTTY 0.76.1.13 - Command Injection ExploitKiTTY 0.76.1.13 - Command Injection
CVE-2022-41322
CVSS 7.8 HIGH 2022-09-05FIX AVAILABLE
CVE-2026-54056
CVSS 7.6 HIGH 2026-06-12FIX AVAILABLE
CVE-2026-54055
CVSS 5.0 MEDIUM 2026-06-12FIX AVAILABLE