Known Vulnerabilities for products from Enigmail
Listed below are 14 of the newest known vulnerabilities associated with the vendor "Enigmail".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2019-14664 json | In Enigmail below 2.1, an attacker in possession of PGP encrypted emails can wrap them as sub-parts within a crafted multipar... | 6.5 - MEDIUM | 2019-08-05 | 2023-11-07 |
| CVE-2019-12269 json | Enigmail before 2.0.11 allows PGP signature spoofing: for an inline PGP message, an attacker can cause the product to display... | 7.5 - HIGH | 2019-05-21 | 2023-11-07 |
| CVE-2018-15586 json | Enigmail before 2.0.6 is prone to to OpenPGP signatures being spoofed for arbitrary messages using a PGP/INLINE signature wra... | 6.5 - MEDIUM | 2019-02-11 | 2019-05-16 |
| CVE-2018-12019 json | The signature verification routine in Enigmail before 2.0.7 interprets user ids as status/control messages and does not corre... | 7.5 - HIGH | 2018-06-13 | 2019-05-16 |
| CVE-2017-17848 json | An issue was discovered in Enigmail before 1.9.9. In a variant of CVE-2017-17847, signature spoofing is possible for multipar... | Not Provided | 2017-12-27 | 2025-04-20 |
| CVE-2017-17847 json | An issue was discovered in Enigmail before 1.9.9. Signature spoofing is possible because the UI does not properly distinguish... | Not Provided | 2017-12-27 | 2025-04-20 |
| CVE-2017-17846 json | An issue was discovered in Enigmail before 1.9.9. Regular expressions are exploitable for Denial of Service, because of attem... | Not Provided | 2017-12-27 | 2025-04-20 |
| CVE-2017-17845 json | An issue was discovered in Enigmail before 1.9.9. Improper Random Secret Generation occurs because Math.Random() is used by p... | Not Provided | 2017-12-27 | 2025-04-20 |
| CVE-2017-17844 json | An issue was discovered in Enigmail before 1.9.9. A remote attacker can obtain cleartext content by sending an encrypted data... | Not Provided | 2017-12-27 | 2025-04-20 |
| CVE-2017-17843 json | An issue was discovered in Enigmail before 1.9.9 that allows remote attackers to trigger use of an intended public key for en... | Not Provided | 2017-12-27 | 2025-04-20 |
| CVE-2014-5369 json | Enigmail 1.7.x before 1.7.2 sends emails in plaintext when encryption is enabled and only BCC recipients are specified, which... | Not Provided | 2014-09-08 | 2026-05-06 |
| CVE-2007-1264 json | Enigmail 0.94.2 and earlier does not properly use the --status-fd argument when invoking GnuPG, which prevents Enigmail from ... | Not Provided | 2007-03-06 | 2026-04-23 |
| CVE-2006-5877 json | The enigmail extension before 0.94.2 does not properly handle large, encrypted file e-mail attachments, which allows remote a... | Not Provided | 2007-02-23 | 2026-04-23 |
| CVE-2005-3256 json | The key selection dialogue in Enigmail before 0.92.1 can incorrectly select a key with a user ID that does not have additiona... | Not Provided | 2005-10-18 | 2025-04-03 |
Known software with vulnerabilities from Enigmail
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Enigmail | Enigmail | 0.74.0 |