CVE-2021-31855

CVE-2021-31855 affects KDE Messagelib up to 5.17.0. In some scenarios, deleting an attachment from a decrypted message stored on a remote server (e.g., IMAP) causes KMail to upload the decrypted content, enabling a user with access to server-stored messages to read plaintext. The root cause is de...

CVE-2017-9604

CVE-2017-9604 details (Mode C): Affected software uses KDE PIM components: kmail and messagelib (KDE Applications before 17.04.2), with the issue occurring in the Send Later flow. The root cause is that the plugin’s sign/encrypt action is not guaranteed to occur during Send Later, enabling potent...