Vulnerabilities in Proton Mail, Skiff and Tutanota

Privacy
1

Same reaearchers also looked at Skiff and Tutanota. That seemed to be worse and allowed for RCE.

"As part of a 3-post series, we will cover other severe vulnerabilities we found in Skiff and Tutanota Desktop in the coming weeks. Those vulnerabilities could have been used by attackers to steal emails, and in one case even execute arbitrary code on the machines of victims. "

3 Likes
2

This is from the last summer and Skiff at lease has fixed it… I remember reading about this on discord last year.

2 Likes
3

Yes, it’s been fixed as mentioned in the summary at the beginning. It’s quite an interesting read, though.

4 Likes