CVE-2023-26433

Summary

CVE-2023-26433 is a vulnerability that affects the handling of IMAP "capabilities" responses during the process of adding an external mail account. An attacker with control over a rogue IMAP server can exploit this weakness by sending maliciously sized responses, leading to excessive resource usage and potential service unavailability. The vulnerability has been mitigated by limiting accepted IMAP server responses to reasonable sizes, and no publicly known exploits are currently available.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.