CVE-2025-26695

A flaw was found in Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: When requesting an OpenPGP key from a WKD server, an incorrect padding size was used, and a network observer could have learned the length of the requested email address...

CVE-2025-26695

creationtimestamp| type| source ---|---|--- 2025-03-10 19:46:12+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114139855050514721 2025-03-10 21:46:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lk2jmu7xjt2m 2025-03-10 23:13:47+00:00| seen| https://t.me/cvedetector/199...

CVE-2025-26695

When requesting an OpenPGP key from a WKD server, an incorrect padding size was used and a network observer could have learned the length of the requested email address. This vulnerability affects Thunderbird 136 and Thunderbird 128.8...

CVE-2025-26695 Downloading of OpenPGP keys from WKD used incorrect padding

When requesting an OpenPGP key from a WKD server, an incorrect padding size was used and a network observer could have learned the length of the requested email address. This vulnerability was fixed in Thunderbird 136 and Thunderbird 128.8...

CVE-2025-26695

CVE-2025-26695 is a Thunderbird vulnerability where an incorrect padding size is used when requesting an OpenPGP key from a WKD server, enabling a network observer to learn the length of the requested email address. Affected: Thunderbird versions prior to 136 and prior to 128.8. Remediation: upgr...

CVE-2025-26695 Downloading of OpenPGP keys from WKD used incorrect padding

When requesting an OpenPGP key from a WKD server, an incorrect padding size was used and a network observer could have learned the length of the requested email address. This vulnerability was fixed in Thunderbird 136 and Thunderbird 128.8...

CVE-2025-26695

When requesting an OpenPGP key from a WKD server, an incorrect padding size was used and a network observer could have learned the length of the requested email address. This vulnerability was fixed in Thunderbird 136 and Thunderbird 128.8...