CVE-2016-7968

Fixed in a distro release EPSS 1%

KMail since version 5.3.0 used a QWebEngine based viewer that had JavaScript enabled. HTML Mail contents were not sanitized for JavaScript and included code was executed.

Published 2016-12-23 · CVE record · OSV

Products: kde kmail

Distro releases