The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
When saving or opening an email attachment on macOS, Thunderbird did not set attribute com.apple.quarantine on the received file. If the received file was an application and the user attempted to open it, then the application was started immediately without asking the user to confirm. This vulnerability affects Thunderbird < 102.3.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade thunderbird-debuginfoUpgrade thunderbird | Feb 3, 2025 | Dec 22, 2022 |
| Gentoo Linux | — | Upgrade mail-client/thunderbird-bin.Upgrade mail-client/thunderbird. | Sep 30, 2022 | Sep 29, 2022 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 102.3Upgrade to the latest version of Mozilla Thunderbird | Sep 22, 2022 | Sep 20, 2022 |
| Suse | — | Upgrade MozillaThunderbirdUpgrade MozillaThunderbird-translations-commonUpgrade MozillaThunderbird-translations-other | Oct 28, 2022 | Oct 27, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub