KLA12541 Multiple vulnerabilities in Mozilla Thunderbird

Detect date:

05/20/2022

Severity:

Critical

Description:

Multiple vulnerabilities were found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to execute arbitrary code and cause denial of service.

Exploitation:

Public exploits exist for this vulnerability.

Affected products:

Mozilla Thunderbird earlier than 91.9.1

Solution:

Update to the latest version
Download Thunderbird

Original advisories:

MFSA2022-19

Impacts:

ACE

Related products:

Mozilla Thunderbird

CVE-IDS:

CVE-2022-18028.8Critical
CVE-2022-15298.8Critical