CVE-2024-10635
Enterprise Protection contains an improper input validation vulnerability in attachment defense that allows an unauthenticated remote attacker to bypass attachment scanning security policy by sending a malicious S/MIME attachment with an opaque signature. When opened by a recipient in a downstream email client, the malicious attachment could cause partial loss of integrity and confidentiality to their system.
Vendor
Product
CWE
Yayın Tarihi
2025-04-28 21:15:56
Güncelleme
2025-10-06 21:15:32
Source Identifier
security@proofpoint.com
KEV Date Added
-