Security Vulnerabilities fixed in Thunderbird 153.5 — Mozilla

A malicious, compromised, or MITM-controlled Exchange server can return a single well-formed SOAP response containing an element with enough attributes to keep Thunderbird's main thread CPU-bound for seconds to hours...