CVE-2018-10497

Samsung Email is affected by a local privilege-escalation vulnerability in the EML file handling. The flaw arises from insufficient validation of user-supplied data in EML parsing, enabling an attacker who can execute low-privileged code to run arbitrary JavaScript and escalate privileges to prot...