Gnome Evolution vulnerabilities

• gnome evolution-data-server, red hat enterprise linux 10, enterprise linux 6 +3 more +5 more Evolution-data-server: local file disclosure via attach file:// uris CVE-2026-110777 5.7 MediumOctober 14, 2026
• gnome evolution data server, red hat enterprise linux 10, enterprise linux 6 +3 more +5 more Evolution-data-server: evolution data server: arbitrary file deletion via inconsistent uri handling CVE-2026-2604 Fix available 5.6 MediumFebruary 18, 2026
• gnome evolution-rss In GNOME evolution-rss through 0.3.96, network-soup.c does not enable TLS certificate... CVE-2021-39361 5.9 MediumAugust 22, 2021
• gnome evolution, ytnef +1 more Multiple directory traversal and buffer overflow vulnerabilities were discovered in yTNEF, and in... CVE-2009-3721 7.8 HighMay 26, 2021
• gnome evolution ** DISPUTED ** GNOME Evolution through 3.38.3 produces a "Valid signature" message for an unknown... CVE-2021-3349 Fix availableDisputed 3.3 LowFebruary 1, 2021
• gnome evolution-data-server, debian linux +1 more In GNOME evolution-data-server before 3.35.91, a malicious server can crash the mail client with... CVE-2020-16117 Fix available 5.9 MediumJuly 29, 2020
• gnome evolution-data-server, canonical ubuntu linux, debian linux +1 more +3 more evolution-data-server (eds) through 3.36.3 has a STARTTLS buffering issue that affects SMTP and... CVE-2020-14928 Fix available 5.9 MediumJuly 8, 2020
• gnome evolution An issue was discovered in GNOME Evolution before 3.35.91. By using the proprietary (non-RFC6068)... CVE-2020-11879 Fix available 6.5 MediumApril 17, 2020
• evolution-data-server3 evolution-data-server3 3.0.3 through 3.2.1 used insecure (non-SSL) connection when attempting to... CVE-2011-3355 7.3 HighNovember 25, 2019
• gnome evolution-ews, redhat enterprise linux +1 more It was discovered evolution-ews before 3.31.3 does not check the validity of SSL certificates. An... CVE-2019-3890 Fix available 8.1 HighAugust 1, 2019
• gnome evolution, debian linux +1 more GNOME Evolution through 3.28.2 is prone to OpenPGP signatures being spoofed for arbitrary... CVE-2018-15587 Fix available 6.5 MediumFebruary 11, 2019
• gnome evolution, canonical ubuntu linux +1 more camel/providers/imapx/camel-imapx-server.c in the IMAPx component in GNOME evolution-data-server... CVE-2016-10727 Fix available 9.8 CriticalJuly 20, 2018
• gnome evolution ** DISPUTED ** addressbook/backends/ldap/e-book-backend-ldap.c in Evolution-Data-Server in GNOME... CVE-2018-12422 Fix availableDisputed 9.8 CriticalJune 15, 2018
• 9folders nine, apple mail, bloop airmail +14 more +16 more The S/MIME specification allows a Cipher Block Chaining (CBC) malleability-gadget attack that can... CVE-2017-17689 Fix available 5.9 MediumMay 16, 2018
• gnome evolution, evolution data server, redhat enterprise linux desktop +2 more +4 more The gpg_ctx_add_recipient function in camel/camel-gpg-context.c in GNOME Evolution 3.8.4 and... CVE-2013-4166 Fix available 7.5 HighAugust 11, 2013
• gnome evolution, oracle solaris, redhat enterprise linux desktop +2 more +4 more GNOME Evolution before 3.2.3 allows user-assisted remote attackers to read arbitrary files via... CVE-2011-3201 Fix available 4.3 MediumMarch 8, 2013
• gnome evolution The Mailer component in Evolution 2.26.1 and earlier uses world-readable permissions for the ... CVE-2009-1631 Fix available 2.1 LowMay 14, 2009
• gnome evolution-data-server The ntlm_challenge function in the NTLM SASL authentication mechanism in camel/camel-sasl-ntlm.c... CVE-2009-0582 Fix available 5.8 MediumMarch 14, 2009
• gnome evolution Heap-based buffer overflow in Evolution 2.22.1 allows user-assisted remote attackers to execute... CVE-2008-1109 Fix available 9.3 HighJune 4, 2008
• gnome evolution Buffer overflow in Evolution 2.22.1, when the ITip Formatter plugin is disabled, allows remote... CVE-2008-1108 Fix available 7.6 HighJune 4, 2008
• gnome evolution Format string vulnerability in the emf_multipart_encrypted function in mail/em-format.c in... CVE-2008-0072 Fix available 6.8 MediumMarch 5, 2008
• gnome evolution Camel (camel-imap-folder.c) in the mailer component for Evolution Data Server 1.11 allows remote... CVE-2007-3257 Fix available 6.8 MediumJune 19, 2007
• gnome evolution Evolution 2.8.1 and earlier does not properly use the --status-fd argument when invoking GnuPG,... CVE-2007-1266 Public exploit 5.0 MediumMarch 6, 2007
• gnome evolution Evolution 2.2.x and 2.3.x in GNOME 2.7 and 2.8, when "load images if sender in addressbook" is... CVE-2006-2789 Fix available 2.6 LowJune 2, 2006
• gnome evolution GNOME Evolution 2.4.2.1 and earlier allows remote attackers to cause a denial of service (CPU and... CVE-2006-0040 Fix available 5.0 MediumMarch 10, 2006
• gnome evolution The cairo library (libcairo), as used in GNOME Evolution and possibly other products, allows... CVE-2006-0528 Public exploitFix available EPSS 11.0% 5.0 MediumFebruary 2, 2006
• gnome evolution Format string vulnerability in Evolution 1.4 through 2.3.6.1 allows remote attackers to cause a... CVE-2005-2550 Fix available 7.5 HighAugust 12, 2005
• gnome evolution Multiple format string vulnerabilities in Evolution 1.5 through 2.3.6.1 allow remote attackers to... CVE-2005-2549 Fix available 7.5 HighAugust 12, 2005
• gnome evolution, debian linux +1 more Integer overflow in camel-lock-helper in Evolution 2.0.2 and earlier allows local users or remote... CVE-2005-0102 Fix available 9.8 CriticalJanuary 24, 2005