CVE-2025-65319: Blixhq Bluemail

Critical severity, CVSS 9.1. EPSS: 0.6% chance of exploitation in the next 30 days.

When using the attachment interaction functionality, Blue Mail 1.140.103 and below saves documents to a file system without a Mark-of-the-Web tag, which allows attackers to bypass the built-in file protection mechanisms of both Windows OS and third-party software.

Affected products

• Blixhq Bluemail: up to and including 1.140.103

Published 2025-12-16. Last modified 2026-07-05.