CVE-2026-35467

The stored API keys in temporary browser client is not marked as protected allowing for JavScript console or other errors to allow for extraction of the encryption credentials...

PT-2026-29898

Name of the Vulnerable Software and Affected Versions versions prior to 2026 Description The stored API keys in a temporary browser client are not adequately protected, potentially allowing extraction of encryption credentials through JavaScript console errors or similar mechanisms. This could...

Mozilla Thunderbird < 78.10.2

The version of Thunderbird installed on the remote Windows host is prior to 78.10.2. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2021-22 advisory. - If a MIME encoded email contains an OpenPGP inline signed or encrypted message part, but also contains an...