CVE-2025-3932

It was possible to craft an email that showed a tracking link as an attachment. If the user attempted to open the attachment, Thunderbird automatically accessed the link. The configuration to block remote content did not prevent that. Thunderbird has been fixed to no longer allow access to web...

CVE-2025-3932

Mozilla Thunderbird is vulnerable to a flaw where an attacker can craft an email displaying a tracking link as an attachment. When a user attempts to open this attachment, Thunderbird automatically accesses the link, bypassing the configuration designed to block remote content. The root cause inv...

CVE-2025-24172

A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, macOS Sonoma 14.7.5. "Block All Remote Content" may not apply for all mail previews...