Bloop - vulnerabilities (CVEs)

5 CVEs in 2 products, 0 in the last 30 days, newest from 2018-08-21.

Products

• Airmail - 3 CVEs
• Airmail 3 - 2 CVEs

Newest CVEs of Bloop

• CVE-2018-15668 - CVSS 5.3 (medium), 2018-08-21: An issue was discovered in Bloop Airmail 3 3.5.9 for macOS. The "send" command in the airmail:// URL scheme allows an external application to send arbitrary…
• CVE-2018-15670 - CVSS 4.3 (medium), 2018-08-21: An issue was discovered in Bloop Airmail 3 3.5.9 for macOS. Its primary WebView instance implements…
• CVE-2018-15669 - CVSS 5.3 (medium), 2018-08-21: An issue was discovered in Bloop Airmail 3 3.5.9 for macOS. Its primary WebView instance implements…
• CVE-2017-17688 - CVSS 5.9 (medium), 2018-05-16: The OpenPGP specification allows a Cipher Feedback Mode (CFB) malleability-gadget attack that can indirectly lead to plaintext exfiltration, aka EFAIL. NOTE:…
• CVE-2017-17689 - CVSS 5.9 (medium), 2018-05-16: The S/MIME specification allows a Cipher Block Chaining (CBC) malleability-gadget attack that can indirectly lead to plaintext exfiltration, aka EFAIL.