Description
Multiple vulnerabilities were found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, cause denial of service, perform cross-site scripting attack, spoof user interface.
Below is a complete list of vulnerabilities:
- Security vulnerability can be exploited to bypass security restrictions.
- Use after free vulnerability can be exploited to cause denial of service or execute arbitrary code.
- Validation of untrusted input vulnerability can be exploited to bypass security restrictions.
- Cross-site scripting (XSS) vulnerability can be exploited to perform cross-site scripting attack.
- Security UI vulnerability can be exploited to spoof user interface.
- Memory safety vulnerability can be exploited to execute arbitrary code.
Original advisories
Related products
CVE list
- CVE-2025-6424 critical
- CVE-2025-6425 warning
- CVE-2025-6427 critical
- CVE-2025-6429 high
- CVE-2025-6430 high
- CVE-2025-6432 critical
- CVE-2025-6433 critical
- CVE-2025-6434 warning
- CVE-2025-6436 critical
- CVE-2025-6435 critical
Read more
Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com
Found an inaccuracy in the description of this vulnerability? Let us know!