CVE-2025-42599
KEV Critical · CVSS 9.8- CVSS
- 9.8
- nvd
- EPSS
- 3.30%
- 88th pct
- KEV
- Listed
- 2025-04-28
- Class
- other
- CWE-121
Description
Active! mail 6 BuildInfo: 6.60.05008561 and earlier contains a stack-based buffer overflow vulnerability. Receiving a specially crafted request created and sent by a remote unauthenticated attacker may lead to arbitrary code execution and/or a denial-of-service (DoS) condition.
References
Status: profiled · ingested 2026-09-24T18:00:19.000Z