thunderbird is vulnerable to Improper Certificate Validation. The vulnerability exists because of not checking email receipient certificates when sending S/Mime encrypted email which allows an attacker to send or receive malicious emails and gain access to the system to perform unauthorized actions.