https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 01:00:14 +0000 https://cve.radiocsirt.org/vuln/cve-2026-88859 <p><strong>Affected:</strong> Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9</p> <p>A flaw was found in Evolution. A remote attacker can exploit this vulnerability by sending a specially crafted HTML email containing a spoofed vCard control. When a victim clicks on this control, Evolution&#39;s trusted JavaScript handler incorrectly assigns an attacker-controlled JavaScript URL to an iframe&#39;s source. This action leads to arbitrary JavaScript execution within the mail-viewing context, effectively bypassing the security measures designed to prevent script execution in email content.</p> <p><strong>Affected:</strong> Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9</p> <p>A flaw was found in Evolution. A remote attacker can exploit this vulnerability by sending a specially crafted HTML email containing a spoofed vCard control. When a victim clicks on this control, Evolution&#39;s trusted JavaScript handler incorrectly assigns an attacker-controlled JavaScript URL to an iframe&#39;s source. This action leads to arbitrary JavaScript execution within the mail-viewing context, effectively bypassing the security measures designed to prevent script execution in email content.</p> https://cve.radiocsirt.org/vuln/cve-2026-88859