cvedb.io
CVE-2025-65319
CRITICAL · CVSS 9.1
EPSS exploitation probability: 0%
Published 2025-12-16T16:15:59.790 · Last modified 2026-06-17T09:55:38.260

Summary

When using the attachment interaction functionality, Blue Mail 1.140.103 and below saves documents to a file system without a Mark-of-the-Web tag, which allows attackers to bypass the built-in file protection mechanisms of both Windows OS and third-party software.

Affected products

blixhq — bluemail

Does this affect you?

Add your gear to cvedb and we'll alert you only when blixhq ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.