Multiple vulnerabilities in Mozilla Thunderbird

Description

Multiple vulnerabilities were found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, cause denial of service, perform cross-site scripting attack, spoof user interface.

Below is a complete list of vulnerabilities:

1. Security vulnerability can be exploited to bypass security restrictions.
2. Use after free vulnerability can be exploited to cause denial of service or execute arbitrary code.
3. Validation of untrusted input vulnerability can be exploited to bypass security restrictions.
4. Cross-site scripting (XSS) vulnerability can be exploited to perform cross-site scripting attack.
5. Security UI vulnerability can be exploited to spoof user interface.
6. Memory safety vulnerability can be exploited to execute arbitrary code.

Original advisories

• MFSA2025-54

Related products

• Mozilla-Thunderbird

CVE list

• CVE-2025-6424
  critical
• CVE-2025-6425
  warning
• CVE-2025-6427
  critical
• CVE-2025-6429
  high
• CVE-2025-6430
  high
• CVE-2025-6432
  critical
• CVE-2025-6433
  critical
• CVE-2025-6434
  warning
• CVE-2025-6436
  critical
• CVE-2025-6435
  critical

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com