Using remote content in OpenPGP encrypted messages can lead to the disclosure of plaintext. This vulnerability affects Thunderbird < 128.4.3 and Thunderbird < 132.0.1.
CVSS Details
- CVSS 3.1 Base Score: 4.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade thunderbird | Dec 6, 2024 | Nov 13, 2024 |
| Amazon Linux Ami 2 | — | Upgrade thunderbird-debuginfoUpgrade thunderbird | Feb 26, 2025 | Nov 13, 2024 |
| Debian | — | Upgrade thunderbird | Nov 18, 2024 | Nov 13, 2024 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 132.0.1 | Nov 14, 2024 | Nov 12, 2024 |
| Oracle_linux | — | Upgrade thunderbird | Dec 3, 2024 | Nov 13, 2024 |
| Redhat_linux | — | Upgrade thunderbird-debuginfoNo solution existsUpgrade thunderbirdUpgrade thunderbird-debugsource | Feb 10, 2025 | Nov 13, 2024 |
| Rocky_linux | — | Upgrade thunderbird-debuginfoUpgrade thunderbirdUpgrade thunderbird-debugsource | Feb 5, 2026 | Dec 19, 2024 |
| Suse | — | Upgrade mozillathunderbird-translations-commonUpgrade mozillathunderbirdUpgrade mozillathunderbird-translations-other | Jan 3, 2025 | Nov 13, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub