Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
apple mail - vulnerabilities and exploits
(subscribe to this query)
2.1
CVSSv2
CVE-2020-3873
This issue was addressed with improved setting propagation. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1. Turning off "Load remote content in messages” may not apply to all mail previews.
Apple Ipados
Apple Iphone Os
4.3
CVSSv2
CVE-2019-7284
This issue was addressed with improved checks. This issue is fixed in iOS 12.2. Processing a maliciously crafted mail message may lead to S/MIME signature spoofing.
Apple Iphone Os
5
CVSSv2
CVE-2018-4227
An issue exists in certain Apple products. iOS prior to 11.4 is affected. macOS prior to 10.13.5 is affected. The issue involves the "Mail" component. It allows remote malicious users to read the cleartext content of S/MIME encrypted messages via direct exfiltration.
Apple Mac Os X
Apple Iphone Os
4.3
CVSSv2
CVE-2017-17688
The OpenPGP specification allows a Cipher Feedback Mode (CFB) malleability-gadget attack that can indirectly lead to plaintext exfiltration, aka EFAIL. NOTE: third parties report that this is a problem in applications that mishandle the Modification Detection Code (MDC) feature o...
Microsoft Outlook 2007
Horde Horde Imp -
Flipdogsolutions Maildroid -
R2mail2 R2mail2 -
Apple Mail -
Bloop Airmail -
Freron Mailmate -
Mozilla Thunderbird -
Emclient Emclient -
Postbox-inc Postbox -
Roundcube Webmail -
1 Github repository
1 Article
4.3
CVSSv2
CVE-2017-17689
The S/MIME specification allows a Cipher Block Chaining (CBC) malleability-gadget attack that can indirectly lead to plaintext exfiltration, aka EFAIL.
Gnome Evolution -
Mozilla Thunderbird -
Ibm Notes -
Emclient Emclient -
Horde Horde Imp -
9folders Nine -
Freron Mailmate -
Kde Kmail -
Ritlabs The Bat -
Microsoft Outlook 2013
Flipdogsolutions Maildroid -
R2mail2 R2mail2 -
Apple Mail -
Bloop Airmail -
Microsoft Outlook 2010
Microsoft Outlook 2007
Google Gmail -
Kde Trojita -
Postbox-inc Postbox -
Microsoft Outlook 2016
1 Github repository
1 Article
2.1
CVSSv2
CVE-2018-4123
An issue exists in certain Apple products. iOS prior to 11.3 is affected. The issue involves alarm and timer handling in the "Clock" component. It allows physically proximate malicious users to discover the iTunes e-mail address.
Apple Iphone Os
4.3
CVSSv2
CVE-2018-4174
An issue exists in certain Apple products. iOS prior to 11.3 is affected. macOS prior to 10.13.4 is affected. The issue involves the "Mail" component. It allows man-in-the-middle malicious users to read S/MIME encrypted messages by leveraging an inconsistency in the use...
Apple Mac Os X
Apple Iphone Os
4.3
CVSSv2
CVE-2018-4111
An issue exists in certain Apple products. macOS prior to 10.13.4 is affected. The issue involves the "Mail" component. It allows man-in-the-middle malicious users to read S/MIME encrypted message content by sending HTML e-mail that references remote resources but lacks...
Apple Mac Os X
4.3
CVSSv2
CVE-2017-7152
An issue exists in certain Apple products. iOS prior to 11.2 is affected. The issue involves the "Mail Message Framework" component. It allows remote malicious users to spoof the address bar via a crafted web site.
Apple Iphone Os
4.3
CVSSv2
CVE-2017-13860
An issue exists in certain Apple products. iOS prior to 11.2 is affected. macOS prior to 10.13.2 is affected. The issue involves the "Mail Drafts" component. It allows man-in-the-middle malicious users to read e-mail content by leveraging mishandling of S/MIME credentia...
Apple Iphone Os
Apple Mac Os X
1 Article
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-33572
CVE-2024-24919
CVE-2024-0230
CVE-2024-32714
HTML injection
local file inclusion
CVE-2024-31098
CVE-2024-31244
privilege
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
8
NEXT »