CVE-2026-42007

creationtimestamp| type| source ---|---|--- 2026-08-28 14:07:28+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mu5jwjpibm2c...

CVE-2026-42007

An attacker that has valid credentials can use a Sieve script with the editheader extension to trigger a use-after-free in the mail editing code, and to write memory contents beyond the intended buffer into the delivered mail. This causes memory leak and opportunity to do memory corruption during...