vulnerability

MFSA2025-91 Thunderbird: Security Vulnerabilities fixed in Thunderbird 140.5 (CVE-2025-13020)

Try Surface Command
Back to search
Severity
9
CVSS
(AV:N/AC:M/Au:N/C:C/I:C/A:C)
Published
Nov 13, 2025
Added
Nov 17, 2025
Modified
Mar 18, 2026

Description

Use-after-free in the WebRTC: Audio/Video component. This vulnerability affects Firefox < 145, Firefox ESR < 140.5, Thunderbird < 145, and Thunderbird < 140.5.

Solution

mozilla-thunderbird-upgrade-140_5

References

Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today