MU
Product
mutt
52
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 12High 0Medium 13Low 7
Watch
Add mutt to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-43863 | 3.7 | May 4 | mutt before 2.3.2 has an infinite loop in data_object_to_stream in crypt-gpgme.c Affected: before 2.3.2 |
| CVE-2026-43862 | 3.7 | May 4 | In mutt before 2.3.2, the imap_auth_gss security level is mishandled Affected: before 2.3.2 |
| CVE-2026-43861 | 3.7 | May 4 | mutt before 2.3.2 does not check for '\0' in url_pct_decode Affected: before 2.3.2 |
| CVE-2026-43860 | 3.7 | May 4 | mutt before 2.3.2 sometimes truncates the hash_passwd by one byte for IMAP auth_cram MD5 digest Affected: before 2.3.2 |
| CVE-2026-43859 | 3.7 | May 4 | mutt before 2.3.2 sometimes uses strfcpy instead of memcpy for the IMAP auth_cram MD5 digest Affected: before 2.3.2 |
| CVE-2026-107570 | 2.5 | Oct 8 | Use of Out-of-range Pointer Offset in mutt Affected: through 2.4.2 |
| CVE-2026-43864 | 2.5 | May 4 | mutt before 2.3.2 has a show_sig_summary NULL pointer dereference Affected: before 2.3.2 |
Showing 7