TI-2024-15674 CVE-2024-23655Attacker can prevent users from accessing received emailsPriority MEDIUM 40Tuta is an encrypted email service.CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00788 · Published 2024-01-25 · Fixed in 3.119.10 CWE-20
TI-2024-15432 CVE-2024-23330Tuta loads images from external resourcesPriority MEDIUM 63Tuta is an encrypted email service.CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00474 · Published 2024-01-23 · Fixed in 119.10 CWE-918
TI-2023-24758 CVE-2023-46116Remote Code Execution via insufficiently sanitized call to shell.openExternalPriority HIGH 75Tutanota (Tuta Mail) is an encrypted email provider.CVSS 3.1CRITICAL 9.3· Network · No auth · User interaction · EPSS 0.01258 · Published 2023-12-15 · Fixed in 3.118.12 CWE-20