GHSA-rh6r-x58g-rprw

GHSA-rh6r-x58g-rprw PUBLISHED CVSS 7.5 HIGH

Record from GitHub Advisory Database · Published May 13, 2022

An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. The issue involves the "Mail" component. It allows remote attackers to read the cleartext content of S/MIME encrypted messages via direct exfiltration.

Risk scores

CVSS 3.0

7.5

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Timeline

May 13, 2022 CVE Published
Apr 9, 2026 Security Advisory

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln GHSA-rh6r-x58g-rprw
vulnetix vdb fixes GHSA-rh6r-x58g-rprw

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/GHSA-rh6r-x58g-rprw/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

https://efail.de/#cve url
http://www.securitytracker.com/id/1041027 url
https://nvd.nist.gov/vuln/detail/CVE-2018-4227 advisory
http://www.securityfocus.com/bid/104897 url
https://support.apple.com/HT208848 advisory
https://support.apple.com/HT208849 advisory

Look up in the Resolve Platform →