UBUNTU-CVE-2025-6430

When a file download is specified via the Content-Disposition header, that directive would be ignored if the file was included via a embed or object tag, potentially making a website vulnerable to a cross-site scripting attack. This vulnerability was fixed in Firefox 140, Firefox ESR 128.12,...

[SECURITY] Fedora 41 Update: thunderbird-128.11.1-1.fc41

Mozilla Thunderbird is a standalone mail and newsgroup client...

FreeBSD : Mozilla -- control access bypass (201cccc1-4a01-11f0-b0f8-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 201cccc1-4a01-11f0-b0f8-b42e991fc52e advisory. [email protected] reports: Thunderbird's update mechanism allowed a medium-integrity user process to...

openSUSE Security Advisory (SUSE-SU-2025:01946-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2025-25488 · Undefined · Undefined

🔴 Mozilla Thunderbird, Privilege Escalation, CVE-2025-1917536 Critical https://t.co/mDopoYuaqv...

Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues: Update to Mozilla Thunderbird 128.11 MFSA 2025-46, bsc1243353: CVE-2025-5262: Double-free in libvpx encoder bmo1962421 CVE-2025-5263: Error handling for script execution was incorrectly isolated from web content bmo1960745...

SUSE-SU-2025:01946-1 Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues: Update to Mozilla Thunderbird 128.11 MFSA 2025-46, bsc1243353: - CVE-2025-5262: Double-free in libvpx encoder bmo1962421 - CVE-2025-5263: Error handling for script execution was incorrectly isolated from web content bmo1960745 -...

[SECURITY] Fedora 42 Update: thunderbird-128.11.1-1.fc42

Mozilla Thunderbird is a standalone mail and newsgroup client...

Mozilla Thunderbird ESR Security Update (mfsa_2025-49) - Windows

Mozilla Thunderbird ESR is prone to an unsolicited file download and credential leak vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Mozilla Thunderbird ESR Security Update (mfsa_2025-49) - Mac OS X

Mozilla Thunderbird ESR is prone to an unsolicited file download and credential leak vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Mozilla Thunderbird Security Update (mfsa_2025-50) - Mac OS X

Mozilla Thunderbird is prone to an unsolicited file download and credential leak vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Slackware: Security Advisory (SSA:2025-162-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mozilla Thunderbird Security Update (mfsa_2025-50) - Windows

Mozilla Thunderbird is prone to an unsolicited file download and credential leak vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

[slackware-security] mozilla-thunderbird

New mozilla-thunderbird packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/mozilla-thunderbird-128.11.1esr-i686-1slack15.0.txz: Upgraded. This release contains security fixes and improvements. For...

Mozilla Thunderbird 安全漏洞

Mozilla Thunderbird is a suite of e-mail client software from the Mozilla Foundation in the United States that is separate from the Mozilla Application Suite. The software supports the IMAP and POP mail protocols as well as the HTML mail format. A security vulnerability exists in Mozilla...

Slackware Linux 15.0 / current mozilla-thunderbird Vulnerability (SSA:2025-162-01)

The version of mozilla-thunderbird installed on the remote host is prior to 128.11.1esr. It is, therefore, affected by a vulnerability as referenced in the SSA:2025-162-01 advisory. New mozilla-thunderbird packages are available for Slackware 15.0 and -current to fix security issues. Tenable has...

KLA84756 SB vulnerability in Mozilla Thunderbird

Security vulnerability was found in Mozilla Thunderbird. Malicious users can exploit this vulnerability to bypass security restrictions. Original advisories mfsa2025-49 Related products Mozilla-Thunderbird CVE list CVE-2025-5986 high Solution Update to the latest version Download Thunderbird...

KLA84757 SB vulnerability in Mozilla Thunderbird

Security vulnerability was found in Mozilla Thunderbird. Malicious users can exploit this vulnerability to bypass security restrictions. Original advisories mfsa2025-50 Related products Mozilla-Thunderbird CVE list CVE-2025-5986 high Solution Update to the latest version Download Thunderbird...

Mozilla Thunderbird < 139.0.2

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 139.0.2. It is, therefore, affected by a vulnerability as referenced in the mfsa2025-50 advisory. - A crafted HTML email using mailbox:/// links can trigger automatic, unsolicited downloads of .pdf files to the...

Mozilla Thunderbird < 128.11.1

The version of Thunderbird installed on the remote Windows host is prior to 128.11.1. It is, therefore, affected by a vulnerability as referenced in the mfsa2025-49 advisory. - A crafted HTML email using mailbox:/// links can trigger automatic, unsolicited downloads of .pdf files to the user's...