Vulnerabilities

TI-2025-05386 CVE-2025-5963 · GHSA-jg7f-3jqj-8gj5

TCC Bypass via Dylib Injection in Postbox

LOW 21

The Postbox's configuration on macOS, specifically the presence of entitlements: "com.apple.security.cs.allow-dyld-environment-variables" and "com.apple.security.cs.disable-library-validation" allows for Dynamic Library…

CVSS 4.0MEDIUM 4.8 Local Low privileges No interaction EPSS 0.00194 Published 2025-06-20 No fix listed CWE-276

TI-2017-12946 CVE-2017-17689 · GHSA-xv45-9768-g2mm

The S/MIME specification allows a Cipher Block Chaining (CBC) malleability-gadget attack…

LOW 33

The S/MIME specification allows a Cipher Block Chaining (CBC) malleability-gadget attack that can indirectly lead to plaintext exfiltration, aka EFAIL.

CVSS 3.0MEDIUM 5.9 Network No auth No interaction EPSS 0.04144 Published 2018-05-16 Will not fix

TI-2017-12945 CVE-2017-17688 · GHSA-87q6-mg5f-mp98

The OpenPGP specification allows a Cipher Feedback Mode (CFB) malleability-gadget attack…

LOW 35

The OpenPGP specification allows a Cipher Feedback Mode (CFB) malleability-gadget attack that can indirectly lead to plaintext exfiltration, aka EFAIL.

CVSS 3.0MEDIUM 5.9 Network No auth No interaction EPSS 0.05443 Published 2018-05-16 No fix listed

Vulnerabilities

Filters

TCC Bypass via Dylib Injection in Postbox

The S/MIME specification allows a Cipher Block Chaining (CBC) malleability-gadget attack…

The OpenPGP specification allows a Cipher Feedback Mode (CFB) malleability-gadget attack…