PatchTheCVEemail vulnerabilities and fixes
Recent CVEs affecting email, with upgrade or downgrade steps. 12 tracked.
email has 12 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 8. Most recent: 2025-11-05. Highest priority: CVE-2023-30729 (score 42/100).
- CVE-2025-21077 LOW 3.3 UPGRADE Improper input validation in Samsung Email prior to version 6.2.06.0 allows local attackers to launch arbitrar
- CVE-2024-34636 MEDIUM 4.0 UPGRADE Use of implicit intent for sensitive communication in Samsung Email prior to version 6.1.94.2 allows local att
- CVE-2024-20867 MEDIUM 5.5 UPGRADE Improper privilege management vulnerability in Samsung Email prior to version 6.1.91.14 allows local attackers
- CVE-2024-20807 LOW 3.3 UPGRADE Implicit intent hijacking vulnerability in Samsung Email prior to version 6.1.90.16 allows local attacker to g
- CVE-2023-42553 MEDIUM 4.0 UPGRADE Improper authorization verification vulnerability in Samsung Email prior to version 6.1.90.4 allows attackers
- CVE-2023-30729 HIGH 8.1 UPGRADE Improper Certificate Validation in Samsung Email prior to version 6.1.82.0 allows remote attacker to intercept
- CVE-2021-25376 LOW 3.1 UPGRADE An improper synchronization logic in Samsung Email prior to version 6.1.41.0 can leak messages in certain mail
- CVE-2021-25375 MEDIUM 6.5 UPGRADE Using predictable index for attachments in Samsung Email prior to version 6.1.41.0 allows remote attackers to
- CVE-2015-1574 MEDIUM 5.0 DOWNGRADE The Google Email application 4.2.2.0200 for Android allows remote attackers to cause a denial of service (pers
- CVE-2012-5588 LOW 2.6 DOWNGRADE The Email Field module 6.x-1.x before 6.x-1.3 for Drupal, when using a field permission module and the field c
- CVE-2012-5587 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in the Email Field module 6.x-1.x before 6.x-1.3 for Drupal allows re
- CVE-2012-4499 MEDIUM 5.0 DOWNGRADE The contact formatter page in the Email Field module 6.x-1.x before 6.x-1.2 and 7.x-1.x before 7.x-1.1 for Dru
FAQ
How do I fix email vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is email being exploited right now?
None of the tracked email CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which email CVE should I patch first?
CVE-2023-30729 currently ranks highest (42/100): Improper Certificate Validation in Samsung Email prior to version 6.1.82.0 allows remote attacker to intercept.