Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2017-17689

S/MIME: CBC gadget attacks allows to exfiltrate plaintext out of encrypted emails

The S/MIME specification allows a Cipher Block Chaining (CBC) malleability-gadget attack that can indirectly lead to plaintext exfiltration, aka EFAIL.

CVSS 3.0 · 5.9 Medium EPSS 4.1% KEV · Not listed
Vendors
9folders Apple Bloop and 13 more
Products
Nine Mail Airmail and 14 more
CVE-2017-17688

OpenPGP: CFB gadget attacks allows to exfiltrate plaintext out of encrypted emails

The OpenPGP specification allows a Cipher Feedback Mode (CFB) malleability-gadget attack that can indirectly lead to plaintext exfiltration, aka EFAIL. NOTE: third parties report that this is a problem in applications that mishandle the Modification Detection Code (MDC) feature or accept an obsolete packet type, not a problem in the OpenPGP specification

CVSS 3.0 · 5.9 Medium EPSS 5.4% KEV · Not listed
Vendors
Apple Bloop Emclient and 8 more
Products
Mail Airmail Emclient and 8 more