EUVD-2018-7460

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Enigmail before 2.0.6 can allow spoofing of OpenPGP signatures in crafted HTML emails.

Reporter	Title	Published	Views	Family All 11
CVE	CVE-2018-15586	11 Feb 201917:00	–	cve
Cvelist	CVE-2018-15586	11 Feb 201917:00	–	cvelist
Debian CVE	CVE-2018-15586	11 Feb 201917:00	–	debiancve
NVD	CVE-2018-15586	11 Feb 201917:29	–	nvd
OSV	DEBIAN-CVE-2018-15586	11 Feb 201917:29	–	osv
OSV	UBUNTU-CVE-2018-15586	11 Feb 201917:29	–	osv
Prion	Design/Logic Flaw	11 Feb 201917:29	–	prion
SUSE CVE	SUSE CVE-2018-15586	15 Feb 202304:24	–	susecve
The Hacker News	Over Dozen Popular Email Clients Found Vulnerable to Signature Spoofing Attacks	30 Apr 201916:59	–	thn
The Hacker News	Over Dozen Popular Email Clients Found Vulnerable to Signature Spoofing Attacks	30 Apr 201916:59	–	thn

[
  {
    "enisaIdVendor": [
      {
        "id": "832c0185-9828-315d-a596-559ca79441de",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "7a7c888e-8443-37c4-a63d-094f69e2fb77",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
suse	www.suse.com/security/cve/CVE-2018-15586.html
packetstormsecurity	www.packetstormsecurity.com/files/cve/CVE-2018-15586
sourceforge	www.sourceforge.net/p/enigmail/bugs/849/
openwall	www.openwall.com/lists/oss-security/2019/04/30/4
seclists	www.seclists.org/fulldisclosure/2019/Apr/38
packetstormsecurity	www.packetstormsecurity.com/files/152703/Johnny-You-Are-Fired.html
github	www.github.com/RUB-NDS/Johnny-You-Are-Fired
github	www.github.com/RUB-NDS/Johnny-You-Are-Fired/blob/master/paper/johnny-fired.pdf
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

6.9Medium risk

Vulners AI Score6.9

CVSS 36.5

CVSS 24.3

EPSS0.00254