PatchTheCVEprotonmail vulnerabilities
Recent CVEs affecting protonmail products. 2 tracked.
protonmail has 2 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 1. Most recent: 2021-05-14. Highest priority: CVE-2018-10169 (score 60/100).
- CVE-2021-32816 MEDIUM 6.5 UPGRADE ProtonMail Web Client is the official AngularJS web client for the ProtonMail secure email service
- CVE-2018-10169 CRITICAL 9.8 DOWNGRADE ProtonVPN 1.3.3 for Windows suffers from a SYSTEM privilege escalation vulnerability through the "ProtonVPN Se
FAQ
How do I fix protonmail vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is protonmail being exploited right now?
None of the tracked protonmail CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which protonmail CVE should I patch first?
CVE-2018-10169 currently ranks highest (60/100): ProtonVPN 1.3.3 for Windows suffers from a SYSTEM privilege escalation vulnerability through the "ProtonVPN Se.