Known vulnerabilities in Enigmail

Software: Enigmail
Software CPE: cpe:2.3:a:enigmail_mozdev_org:enigmail:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 10
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Enigmail Enigmail is affected by 10 known vulnerabilities: 10 medium Critical High Medium Low

Vulnerabilities (10)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU19940 - Exposure of sensitive information to an unauthorized actor
CVE-2019-14664
CWE-200 Medium
No
No
2.1 06.08.2019 SB2019080504
SB2019111125
SB2019111126
and 3 more
#VU31059 - Improper Verification of Cryptographic Signature
CVE-2019-12269
CWE-347 Medium
No
No
2.0.11 21.05.2019 SB2019052107
SB2019062414
SB2019062415
and 5 more
#VU31159 - Improper Verification of Cryptographic Signature
CVE-2018-15586
CWE-347 Medium
No
No
2.0.6 11.02.2019 SB2019021114
#VU37739 - Improper input validation
CVE-2017-17843
CWE-20 Medium
No
No
1.9.9 27.12.2017 SB2017122704
#VU31376 - Cleartext Transmission of Sensitive Information
CVE-2017-17844
CWE-319 Medium
No
No
1.9.9 27.12.2017 SB2017122703
#VU31377 - Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
CVE-2017-17845
CWE-338 Medium
No
No
1.9.9 27.12.2017 SB2017122703
#VU31378 - Improper input validation
CVE-2017-17846
CWE-20 Medium
No
No
1.9.9 27.12.2017 SB2017122703
#VU31379 - Improper Verification of Cryptographic Signature
CVE-2017-17847
CWE-347 Medium
No
No
1.9.9 27.12.2017 SB2017122703
#VU31380 - Improper Verification of Cryptographic Signature
CVE-2017-17848
CWE-347 Medium
No
No
1.9.9 27.12.2017 SB2017122703
#VU41347 - Cryptographic Issues
CVE-2014-5369
CWE-310 Medium
No
No
- 08.09.2014 SB2014090803
SB2014082909
SB2014083002