Medium severity5.3NVD Advisory· Published Aug 21, 2018· Updated Jun 17, 2026
CVE-2018-15669
CVE-2018-15669
Description
An issue was discovered in Bloop Airmail 3 3.5.9 for macOS. Its primary WebView instance implements "webView:decidePolicyForNavigationAction:request:frame:decisionListener:" such that requests from HTMLIFrameElements are blacklisted. However, other sub-classes of HTMLFrameOwnerElements are not forbidden by the policy. An attacker may abuse HTML plug-in elements within an email to trigger frame navigation requests that bypass this filter.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1Patches
Vulnerability mechanics
References
1- versprite.com/advisories/airmail-3-for-mac-3/nvdThird Party Advisory
News mentions
0No linked articles in our index yet.