https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-24T23:51:43.819830+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2016-09998 cnvd-2016-09998 2026-10-24T23:51:43.863161+00:00 cnvd-2016-09998 https://cve.radiocsirt.org/vuln/euvd-2026-87009 EUVD-2026-87009 2026-10-24T23:51:43.863205+00:00 EUVD-2026-87009 https://cve.radiocsirt.org/vuln/fkie_cve-2016-7967 fkie_cve-2016-7967 2026-10-24T23:51:43.863220+00:00

KMail since version 5.3.0 used a QWebEngine based viewer that had JavaScript enabled. Since the generated html is executed in the local file security context by default access to remote and local URLs was enabled.

 https://cve.radiocsirt.org/vuln/ghsa-99pq-r374-7jh3 GHSA-99pq-r374-7jh3 2026-10-24T23:51:43.863250+00:00

KMail since version 5.3.0 used a QWebEngine based viewer that had JavaScript enabled. Since the generated html is executed in the local file security context by default access to remote and local URLs was enabled.

 https://cve.radiocsirt.org/vuln/gsd-2016-7967 gsd-2016-7967 2026-10-24T23:51:43.863265+00:00 gsd-2016-7967 https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-7967 Withdrawn: UBUNTU-CVE-2016-7967 2026-10-24T23:51:43.863277+00:00

Withdrawn by the publisher.

Affected: Ubuntu:14.04:LTS: kdepim

KMail since version 5.3.0 used a QWebEngine based viewer that had JavaScript enabled. Since the generated html is executed in the local file security context by default access to remote and local URLs was enabled.