CVE-2024-46462

—

CVSS 3.1

7.8 high

EPSS

<1%p5

Published

Nov 15, 2024 (Nov 15, 2024)

Modified

Jun 17, 2026

Description

By default, dedicated folders of ZEDMAIL for Windows up to 2024.3 can be accessed by other users to misuse technical files and make them perform tasks with higher privileges. Configuration of ZEDMAIL has to be modified to prevent this vulnerability.

Weakness: CWE-276
Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.