A crafted CMS message could have been processed incorrectly, leading to an invalid memory read, and potentially further memory corruption. This vulnerability affects Thunderbird < 91.10, Firefox < 101, and Firefox ESR < 91.10.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade librewolfUpgrade firefoxUpgrade firefox-esrUpgrade thunderbird | Aug 22, 2024 | Dec 22, 2022 |
| Amazon Linux Ami 2 | — | Upgrade thunderbirdUpgrade firefoxUpgrade thunderbird-debuginfoUpgrade firefox-debuginfo | Sep 30, 2022 | Sep 30, 2022 |
| Centos_linux | — | Upgrade thunderbird-debugsourceUpgrade firefoxUpgrade thunderbirdUpgrade thunderbird-debuginfoUpgrade firefox-debugsourceUpgrade firefox-debuginfo | Jun 3, 2022 | Jun 1, 2022 |
| Debian | — | Upgrade firefox-esrUpgrade thunderbird | Jun 3, 2022 | Jun 3, 2022 |
| Dell Powerstore Dsa2023129 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Apr 4, 2023 |
| Dell Powerstore Dsa2023173 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jun 21, 2023 |
| Gentoo Linux | — | Upgrade www-client/firefox.Upgrade www-client/firefox-bin.Upgrade mail-client/thunderbird.Upgrade mail-client/thunderbird-bin. | Aug 11, 2022 | Aug 10, 2022 |
| Mfsa2022 20 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox version 101.0 | Jun 1, 2022 | May 31, 2022 |
| Mfsa2022 21 | — | Upgrade to Mozilla Firefox ESR version 91.10Upgrade to the latest version of Mozilla Firefox | Jun 1, 2022 | May 31, 2022 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 91.10Upgrade to the latest version of Mozilla Thunderbird | Jun 1, 2022 | May 31, 2022 |
| Oracle_linux | — | Upgrade thunderbirdUpgrade firefox | Jun 2, 2022 | May 31, 2022 |
| Redhat_linux | — | No solution existsUpgrade firefox-debugsourceUpgrade firefoxUpgrade thunderbird-debugsourceUpgrade thunderbird-debuginfoUpgrade firefox-debuginfoUpgrade thunderbird | Jun 3, 2022 | Jun 1, 2022 |
| Rocky_linux | — | Upgrade thunderbird-debugsourceUpgrade firefox-debuginfoUpgrade thunderbirdUpgrade thunderbird-debuginfoUpgrade firefoxUpgrade firefox-debugsource | Jul 11, 2022 | Jul 7, 2022 |
| Suse | — | Upgrade mozilla-nspr-32bitUpgrade libfreebl3-32bitUpgrade libsoftokn3-hmacUpgrade libfreebl3Upgrade MozillaFirefoxUpgrade libsoftokn3-32bitUpgrade libfreebl3-hmacUpgrade mozilla-nss-sysinit-32bitUpgrade mozilla-nss-32bitUpgrade mozilla-nss-certs-32bitUpgrade mozilla-nsprUpgrade mozillafirefox-branding-upstreamUpgrade mozilla-nss-develUpgrade mozilla-nssUpgrade libfreebl3-hmac-32bitUpgrade libsoftokn3-hmac-32bitUpgrade MozillaFirefox-translations-otherUpgrade mozilla-nss-toolsUpgrade mozilla-nss-certsUpgrade libsoftokn3Upgrade MozillaThunderbird-translations-commonUpgrade mozilla-nspr-develUpgrade mozilla-nss-sysinitUpgrade MozillaThunderbirdUpgrade MozillaFirefox-translations-commonUpgrade MozillaFirefox-develUpgrade MozillaThunderbird-translations-other | Oct 26, 2022 | Jul 23, 2022 |
| Ubuntu | — | Upgrade thunderbirdUpgrade firefox | Jun 14, 2022 | Jun 2, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub