Evolution-data-server (Gnome) - vulnerabilities (CVEs)

3 CVEs, 1 in the last 30 days, 103 known versions, newest CVE from 2026-10-14. Vendor: Gnome.

CVEs of Evolution-data-server

• CVE-2026-110777 - CVSS 5.7 (medium), 2026-10-14: A flaw was found in evolution-data-server. Calendar events containing a file:// URI in their ATTACH property automatically read the targeted local file,…
• CVE-2020-16117 - CVSS 5.9 (medium), 2020-07-29: In GNOME evolution-data-server before 3.35.91, a malicious server can crash the mail client with a NULL pointer dereference by sending an invalid (e.g.,…
• CVE-2020-14928 - CVSS 5.9 (medium), 2020-07-17: evolution-data-server (eds) through 3.36.3 has a STARTTLS buffering issue that affects SMTP and POP3. When a server sends a "begin TLS" response, eds reads…
• CVE-2009-0582 - CVSS 5.8 (medium), 2009-03-14: The ntlm_challenge function in the NTLM SASL authentication mechanism in camel/camel-sasl-ntlm.c in Camel in Evolution Data Server (aka evolution-data-server)…