Using remote content in OpenPGP encrypted messages can lead to the disclosure of plaintext. This vulnerability affects Thunderbird < 128.4.3 and Thunderbird < 132.0.1.
CVSS Details
- CVSS 3.1 Base Score: 4.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade thunderbird | Dec 6, 2024 | Nov 13, 2024 |
| Amazon Linux Ami 2 | — | Upgrade thunderbirdUpgrade thunderbird-debuginfo | Feb 26, 2025 | Nov 13, 2024 |
| Debian | — | Upgrade thunderbird | Nov 18, 2024 | Nov 13, 2024 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 132.0.1 | Nov 14, 2024 | Nov 12, 2024 |
| Oracle_linux | — | Upgrade thunderbird | Dec 3, 2024 | Nov 13, 2024 |
| Redhat_linux | — | Upgrade thunderbird-debuginfoNo solution existsUpgrade thunderbirdUpgrade thunderbird-debugsource | Feb 10, 2025 | Nov 13, 2024 |
| Rocky_linux | — | Upgrade thunderbird-debuginfoUpgrade thunderbird-debugsourceUpgrade thunderbird | Feb 5, 2026 | Dec 19, 2024 |
| Suse | — | Upgrade mozillathunderbird-translations-otherUpgrade mozillathunderbirdUpgrade mozillathunderbird-translations-common | Jan 3, 2025 | Nov 13, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub