Multipart Email Vulnerability in KDE KMail by KDE

CVE-2019-10732

What is CVE-2019-10732?

A security flaw in KDE KMail version 5.2.3 allows attackers to exploit S/MIME or PGP encrypted emails. By crafting multipart emails, an attacker can hide encrypted content and send it to an unsuspecting recipient. If the recipient replies to the seemingly benign email, they inadvertently disclose the plaintext of the encrypted messages back to the attacker. This vulnerability poses a serious risk to the confidentiality of sensitive communications.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References