CVE-2019-10735

CVE-2019-10735 describes a vulnerability in Claws Mail 3.14.1 where an attacker can craft multipart emails containing S/MIME or PGP encrypted content, hidden through HTML/CSS or ASCII newlines. If a recipient replies to such an email, their response inadvertently leaks the plaintext of the hidden encrypted message parts back to the attacker. This is a medium severity vulnerability (CVSS 4.3) requiring user interaction, with a potential impact of information disclosure. There is no known active exploitation, public exploit code, or significant community discussion surrounding this CVE.