CVE-2019-18928

CVE-2019-18928 affects Cyrus IMAP server (Cyrus IMAPD) in 2.5.x before 2.5.14 and 3.x before 3.0.12. The vulnerability allows privilege escalation because an HTTP request may be interpreted in the authentication context of a previous request that arrived on the same connection. This is a server-s...

CVE-2019-11356

CVE-2019-11356 affects Cyrus IMAP Server (cyrus-imapd) via the CalDAV feature in httpd. The root cause is a buffer overflow triggered by a long iCalendar property name in CalDAV requests, enabling remote code execution. Impact is high (per CVSS) with potential remote compromise, depending on the ...

CVE-2021-33582

CVE-2021-33582 affects Cyrus IMAPD; a bad string-hashing algorithm in internal hash tables can cause a CPU-denial-of-service by directing many inputs to a single bucket. Affected releases include Cyrus IMAPD prior to 3.4.2, 3.2.8, and 3.0.16, with fixes implemented in those versions. Public advis...

CVE-2019-19783

CVE-2019-19783 affects Cyrus IMAP (cyrus-imapd) where the lmtpd sieve handling could allow a user to create a mailbox with administrator privileges via a fileinto directive, due to folder handling in autosieve_createfolder() in imap/lmtp_sieve.c. Affected: 2.5.x (before 2.5.15), 3.0.x (before 3.0...

CVE-2015-8077

CVE-2015-8077 is a Cyrus IMAP vulnerability affecting 2.3.19, 2.4.18, and 2.5.6 where an integer overflow in index_urlfetch (imap/index.c) can be triggered via urlfetch range checks and the start_octet, with impact described as unspecified. The issue is linked to an incomplete fix for CVE-2015-80...

CVE-2015-8076

CVE-2015-8076 affects Cyrus IMAPd (Cyrus IMAP) where the index_urlfetch function in index.c is vulnerable to an out-of-bounds heap read via the urlfetch range. Affected are Cyrus IMAP 2.3.x before 2.3.19, 2.4.x before 2.4.18, and 2.5.x before 2.5.4. Public references (OpenSUSE, Red Hat, OpenVAS n...

CVE-2021-32056

CVE-2021-32056 affects Cyrus IMAP: vulnerable are Cyrus IMAP before 3.2.7, and 3.3.x and 3.4.x before 3.4.1. Root cause: remote authenticated users can bypass server-annotation access restrictions, causing replication to stall. Remediation: upgrade Cyrus IMAP to 3.2.7 or to 3.4.1 (or later). No e...

CVE-2015-8078

CVE-2015-8078 affects Cyrus IMAPd (core server) via an integer overflow in index_urlfetch (imap/index.c). Affected are Cyrus IMAPd 2.3.19, 2.4.18, and 2.5.6, with exploitation related to urlfetch range checks and the section_offset variable, and it notes this was a follow-on of a prior fix for CV...

CVE-2017-14230

CVE-2017-14230 (Cyrus IMAP) affects the mboxlist_do_find function in imap/mboxlist.c prior to version 3.0.4. An off-by-one error in the LIST command prefix calculation can read uninitialized memory, potentially enabling a remote attacker to obtain sensitive information or cause a daemon crash. Th...

CVE-2026-61909

Cyrus IMAP before 3.12.4 (backported to 3.10.4 and 3.8.8) contains an ACL bypass in its CalDAV/CardDAV multiget functionality. An authenticated DAV user who holds some shared access to another user's calendar or address book can read unshared events or contacts by including target hrefs in a cale...

CVE-2026-61910

Cyrus IMAP before 3.12.4 is affected by a flaw in the Mailbox/set command, where an authenticated user holding the maySetKeywords privilege on another user's mailbox can alter its special-use annotation . This allows the sharee to reassign the shared mailbox to roles such as archived or snoozed ,...

CVE-2026-61908

An out-of-bounds read vulnerability in Cyrus IMAP before 3.12.4 (also fixed in 3.10.4 and 3.8.8) allows an authenticated user to download a crafted JMAP email-header blob ID of the form H-, which reads past the end of the internal blob_headers array, potentially exposing adjacent heap memory . NV...

CVE-2026-61915

Cyrus IMAP before 3.12.4 is affected by a VPATCH BYPARAM double-free in the CalDAV worker. An authenticated calendar user can trigger a crash by sending a PATCH request with PATCH-ACTION="BYPARAM@..." against a resource that has two or more properties of the matched kind, causing the memory holdi...

CVE-2026-61911

Cyrus IMAP before 3.12.4 is affected by a Sieve mailbox existence oracle . An authenticated user can install a Sieve script that probes whether another user's private mailbox exists, or read the value of shared mailbox annotations , by observing which fileinto branch fires during LMTP delivery. T...