Multiple vulnerabilities in Mozilla Thunderbird

Описание

Multiple vulnerabilities were found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions, perform cross-site scripting attack, obtain sensitive information, gain privileges, cause denial of service.

Below is a complete list of vulnerabilities:

1. Memory safety vulnerability can be exploited to execute arbitrary code.
2. Security vulnerability can be exploited to bypass security restrictions.
3. Cross-site scripting (XSS) vulnerability can be exploited to perform cross-site scripting attack.
4. A remote code execution vulnerability can be exploited remotely to execute local code.
5. An elevation of privilege vulnerability can be exploited remotely to obtain sensitive information or gain privileges.
6. Out of bounds memory read vulnerability can be exploited to cause denial of service.
7. An elevation of privilege vulnerability can be exploited remotely to gain privileges.

Первичный источник обнаружения

• MFSA2025-31
  

Связанные продукты

• Mozilla-Thunderbird

Список CVE

• CVE-2025-2817
  critical
• CVE-2025-4083
  critical
• CVE-2025-4085
  high
• CVE-2025-4087
  high
• CVE-2025-4088
  high
• CVE-2025-4089
  high
• CVE-2025-4091
  high
• CVE-2025-4092
  high

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com