Kmail@5.3.0 Security Vulnerabilities and Issues — Kmail@5.3.0 CVE List

Lucene search

KdeKmail5.3.0

2 matches found

CVE•added 2016/12/23 10:59 p.m.•39 views

CVE-2016-7967

KMail since version 5.3.0 used a QWebEngine based viewer that had JavaScript enabled. Since the generated html is executed in the local file security context by default access to remote and local URLs was enabled.

8.1CVSS7.4AI score0.00332EPSS

CVE•added 2016/12/23 10:59 p.m.•38 views

CVE-2016-7968

KMail since version 5.3.0 used a QWebEngine based viewer that had JavaScript enabled. HTML Mail contents were not sanitized for JavaScript and included code was executed.

7.5CVSS6.9AI score0.0024EPSS