Geary

geary

Vendor: Gnome • 1 CVE

CVEs (1)

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2020-24661

2Fedoraproject

Gnome

2Fedora

Geary

Jun 17, 2026

Aug 26, 2020

N/A· v4

5.9 MEDIUM· v3

2.6 LOW· v2

GNOME Geary before 3.36.3 mishandles pinned TLS certificate verification for IMAP and SMTP services using invalid TLS certificates (e.g., self-signed certificates) when the client system is not configured to use a system-provided PKCS#11 store. This allows a meddler in the middle to present a different invalid certificate to intercept incoming and outgoing mail.Show less