7 matches found
CVE-2025-26695
A flaw was found in Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: When requesting an OpenPGP key from a WKD server, an incorrect padding size was used, and a network observer could have learned the length of the requested email address...
CVE-2025-26695
creationtimestamp| type| source ---|---|--- 2025-03-10 19:46:12+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114139855050514721 2025-03-10 21:46:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lk2jmu7xjt2m 2025-03-10 23:13:47+00:00| seen| https://t.me/cvedetector/199...
CVE-2025-26695
When requesting an OpenPGP key from a WKD server, an incorrect padding size was used and a network observer could have learned the length of the requested email address. This vulnerability affects Thunderbird 136 and Thunderbird 128.8...
CVE-2025-26695
When requesting an OpenPGP key from a WKD server, an incorrect padding size was used and a network observer could have learned the length of the requested email address. This vulnerability was fixed in Thunderbird 136 and Thunderbird 128.8...
CVE-2025-26695 Downloading of OpenPGP keys from WKD used incorrect padding
When requesting an OpenPGP key from a WKD server, an incorrect padding size was used and a network observer could have learned the length of the requested email address. This vulnerability was fixed in Thunderbird 136 and Thunderbird 128.8...
CVE-2025-26695 Downloading of OpenPGP keys from WKD used incorrect padding
When requesting an OpenPGP key from a WKD server, an incorrect padding size was used and a network observer could have learned the length of the requested email address. This vulnerability was fixed in Thunderbird 136 and Thunderbird 128.8...
CVE-2025-26695
The Mozilla Thunderbird email client is vulnerable to an information leak when requesting an OpenPGP key from a WKD server . The root cause is the use of an incorrect padding size , which allows a network observer to determine the length of the requested email address. This vulnerability affects ...