Multiple vulnerabilities in Mozilla Thunderbird

Description

Multiple vulnerabilities were found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions, perform cross-site scripting attack, obtain sensitive information, gain privileges, cause denial of service.

Below is a complete list of vulnerabilities:

1. Memory safety vulnerability can be exploited to execute arbitrary code.
2. Security vulnerability can be exploited to bypass security restrictions.
3. Cross-site scripting (XSS) vulnerability can be exploited to perform cross-site scripting attack.
4. A remote code execution vulnerability can be exploited remotely to execute local code.
5. An elevation of privilege vulnerability can be exploited remotely to obtain sensitive information or gain privileges.
6. Out of bounds memory read vulnerability can be exploited to cause denial of service.
7. An elevation of privilege vulnerability can be exploited remotely to gain privileges.

Original advisories

• MFSA2025-31

Related products

• Mozilla-Thunderbird

CVE list

• CVE-2025-2817
  critical
• CVE-2025-4083
  critical
• CVE-2025-4085
  high
• CVE-2025-4087
  high
• CVE-2025-4088
  high
• CVE-2025-4089
  high
• CVE-2025-4091
  high
• CVE-2025-4092
  high

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com