Package · Ubuntu

evolution

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

5 results · Feed

Medium 6.3

CVE-2026-88859

Evolution: evolution: javascript execution via spoofed vcard control bypasses mail script-markup restriction

A flaw was found in Evolution. A remote attacker can exploit this vulnerability by sending a specially crafted HTML email containing a spoofed vCard control. When a victim clicks on this control, Evolution's trusted JavaScript handler incorrectly assigns an a…

Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu

Sep 10, 2026
Unscored —

CVE-2023-35799

Stormshield Endpoint Security Evolution 2.0.0 through 2.3.2 has Insecure Permissions. An interactive user can use the S…

evolution Ubuntu

Jun 27, 2023
Unscored —

CVE-2020-11879

An issue was discovered in GNOME Evolution before 3.35.91. By using the proprietary (non-RFC6068) "mailto?attach=..." p…

evolution evolution Debian Ubuntu

Apr 17, 2020
Unscored —

CVE-2018-15587

GNOME Evolution through 3.28.2 is prone to OpenPGP signatures being spoofed for arbitrary messages using a specially cr…

evolution evolution-data-server evolution Debian Ubuntu

Feb 11, 2019
Unscored —

CVE-2018-12422

addressbook/backends/ldap/e-book-backend-ldap.c in Evolution-Data-Server in GNOME Evolution through 3.29.2 might allow …

evolution-data-server evolution-data-server evolution Debian Ubuntu

Jun 15, 2018