CVE-2014-8878: Kde Kmail

Medium severity, CVSS 5.9. EPSS: 1.2% chance of exploitation in the next 30 days.

KDE KMail does not encrypt attachments in emails when "automatic encryption" is enabled, which allows remote attackers to obtain sensitive information by sniffing the network.

Affected products

• Kde Kmail: version 4.11.5 only

Published 2017-09-28. Last modified 2026-06-17.