https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T04:52:02.897134+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2018-24155 cnvd-2018-24155 2026-10-07T04:52:02.902285+00:00 cnvd-2018-24155 https://cve.radiocsirt.org/vuln/euvd-2026-65621 EUVD-2026-65621 2026-10-07T04:52:02.902327+00:00 EUVD-2026-65621 https://cve.radiocsirt.org/vuln/fkie_cve-2018-12019 fkie_cve-2018-12019 2026-10-07T04:52:02.902342+00:00

The signature verification routine in Enigmail before 2.0.7 interprets user ids as status/control messages and does not correctly keep track of the status of multiple signatures, which allows remote attackers to spoof arbitrary email signatures via public keys containing crafted primary user ids.

 https://cve.radiocsirt.org/vuln/ghsa-fc79-j7vw-6xjg GHSA-fc79-j7vw-6xjg 2026-10-07T04:52:02.902374+00:00

The signature verification routine in Enigmail before 2.0.7 interprets user ids as status/control messages and does not correctly keep track of the status of multiple signatures, which allows remote attackers to spoof arbitrary email signatures via public keys containing crafted primary user ids.

 https://cve.radiocsirt.org/vuln/gsd-2018-12019 gsd-2018-12019 2026-10-07T04:52:02.902390+00:00 gsd-2018-12019 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10736-1 openSUSE-SU-2024:10736-1 — enigmail-2.2.4-1.4 on GA media 2026-10-07T04:52:02.902401+00:00

enigmail-2.2.4-1.4 on GA media

 https://cve.radiocsirt.org/vuln/suse-su-2018:2243-1 SUSE-SU-2018:2243-1 — Security update for enigmail 2026-10-07T04:52:02.902421+00:00

Security update for enigmail

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-12019 UBUNTU-CVE-2018-12019 2026-10-07T04:52:02.902436+00:00

Affected: Ubuntu:16.04:LTS: enigmail, Ubuntu:18.04:LTS: enigmail, Ubuntu:20.04:LTS: enigmail, Ubuntu:22.04:LTS: enigmail

The signature verification routine in Enigmail before 2.0.7 interprets user ids as status/control messages and does not correctly keep track of the status of multiple signatures, which allows remote attackers to spoof arbitrary email signatures via public keys containing crafted primary user ids.