Mailvelope

Mailvelope is a browser-based email encryption extension that integrates OpenPGP functionality into webmail interfaces, presenting a specialized attack surface centered on cryptographic verification and UI-layer trust. The documented vulnerabilities reflect the inherent challenges of implementing end-to-end encryption in a browser context, clustering around improper certificate validation, cryptographic signature verification flaws, authorization bypasses, and UI-rendering issues that could undermine the security model users expect from the tool. Current exploitation activity and exposure counts are shown alongside this summary.