CVE-2025-3877
A crafted HTML email using mailbox:/// links can trigger automatic, unsolicited downloads of .pdf...
CVE-2025-3877 has been rejected by its source and should not be treated as a live vulnerability, published May 14, 2025.
- Severity
- 7.5 HighCVSS 3.1, GitHub Advisories
- Exploit chance
- UnscoredNo EPSS score yet
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
This CVE was marked as fixed, but due to other code landing - was not actually fixed. It was subsequently fixed in CVE-2025-5986.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- None
- Availability
- None
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
thunderbirdAlmaLinux:10 From an advisory covering 4 CVEs | before 128.10.1-1.el10_0.alma.1 | 128.10.1-1.el10_0.alma.1 |
thunderbirdAlmaLinux:8 From an advisory covering 12 CVEs | before 128.11.0-1.el8_10.alma.1 | 128.11.0-1.el8_10.alma.1 |
thunderbirdMageia:9 From an advisory covering 6 CVEs | before 128.10.2-1.mga9 | 128.10.2-1.mga9 |
thunderbird-l10nMageia:9 From an advisory covering 6 CVEs | before 128.10.2-1.mga9 | 128.10.2-1.mga9 |
thunderbirdRed Hat:enterprise_linux:10.0 From an advisory covering 4 CVEs | before 0:128.10.1-1.el10_0 | 0:128.10.1-1.el10_0 |
thunderbird-debuginfoRed Hat:enterprise_linux:10.0 From an advisory covering 4 CVEs | before 0:128.10.1-1.el10_0 | 0:128.10.1-1.el10_0 |
thunderbird-debugsourceRed Hat:enterprise_linux:10.0 From an advisory covering 4 CVEs | before 0:128.10.1-1.el10_0 | 0:128.10.1-1.el10_0 |
thunderbirdRed Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs | before 0:128.10.1-1.el9_6 | 0:128.10.1-1.el9_6 |
thunderbird-debuginfoRed Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs | before 0:128.10.1-1.el9_6 | 0:128.10.1-1.el9_6 |
thunderbird-debugsourceRed Hat:enterprise_linux:9::appstream From an advisory covering 4 CVEs | before 0:128.10.1-1.el9_6 | 0:128.10.1-1.el9_6 |
Show 42 moreShow less
| Package | Affected | Fixed |
|---|---|---|
thunderbirdRed Hat:rhel_e4s:9.0::appstream From an advisory covering 4 CVEs | before 0:128.10.1-1.el9_0 | 0:128.10.1-1.el9_0 |
thunderbird-debuginfoRed Hat:rhel_e4s:9.0::appstream From an advisory covering 4 CVEs | before 0:128.10.1-1.el9_0 | 0:128.10.1-1.el9_0 |
thunderbird-debugsourceRed Hat:rhel_e4s:9.0::appstream From an advisory covering 4 CVEs | before 0:128.10.1-1.el9_0 | 0:128.10.1-1.el9_0 |
thunderbirdRed Hat:rhel_eus:9.4::appstream From an advisory covering 4 CVEs | before 0:128.10.1-1.el9_4 | 0:128.10.1-1.el9_4 |
thunderbird-debuginfoRed Hat:rhel_eus:9.4::appstream From an advisory covering 4 CVEs | before 0:128.10.1-1.el9_4 | 0:128.10.1-1.el9_4 |
thunderbird-debugsourceRed Hat:rhel_eus:9.4::appstream From an advisory covering 4 CVEs | before 0:128.10.1-1.el9_4 | 0:128.10.1-1.el9_4 |
thunderbirdRed Hat:rhel_eus:9.2::appstream From an advisory covering 4 CVEs | before 0:128.10.1-1.el9_2 | 0:128.10.1-1.el9_2 |
thunderbird-debuginfoRed Hat:rhel_eus:9.2::appstream From an advisory covering 4 CVEs | before 0:128.10.1-1.el9_2 | 0:128.10.1-1.el9_2 |
thunderbird-debugsourceRed Hat:rhel_eus:9.2::appstream From an advisory covering 4 CVEs | before 0:128.10.1-1.el9_2 | 0:128.10.1-1.el9_2 |
thunderbirdRed Hat:rhel_aus:8.2::appstream From an advisory covering 4 CVEs | before 0:128.10.1-1.el8_2 | 0:128.10.1-1.el8_2 |
thunderbird-debuginfoRed Hat:rhel_aus:8.2::appstream From an advisory covering 4 CVEs | before 0:128.10.1-1.el8_2 | 0:128.10.1-1.el8_2 |
thunderbird-debugsourceRed Hat:rhel_aus:8.2::appstream From an advisory covering 4 CVEs | before 0:128.10.1-1.el8_2 | 0:128.10.1-1.el8_2 |
thunderbirdRed Hat:rhel_aus:8.4::appstream From an advisory covering 4 CVEs | before 0:128.10.1-1.el8_4 | 0:128.10.1-1.el8_4 |
thunderbird-debuginfoRed Hat:rhel_aus:8.4::appstream From an advisory covering 4 CVEs | before 0:128.10.1-1.el8_4 | 0:128.10.1-1.el8_4 |
thunderbird-debugsourceRed Hat:rhel_aus:8.4::appstream From an advisory covering 4 CVEs | before 0:128.10.1-1.el8_4 | 0:128.10.1-1.el8_4 |
thunderbirdRed Hat:rhel_aus:8.6::appstream From an advisory covering 4 CVEs | before 0:128.10.1-1.el8_6 | 0:128.10.1-1.el8_6 |
thunderbird-debuginfoRed Hat:rhel_aus:8.6::appstream From an advisory covering 4 CVEs | before 0:128.10.1-1.el8_6 | 0:128.10.1-1.el8_6 |
thunderbird-debugsourceRed Hat:rhel_aus:8.6::appstream From an advisory covering 4 CVEs | before 0:128.10.1-1.el8_6 | 0:128.10.1-1.el8_6 |
thunderbirdRed Hat:rhel_e4s:8.6::appstream From an advisory covering 4 CVEs | before 0:128.10.1-1.el8_6 | 0:128.10.1-1.el8_6 |
thunderbird-debuginfoRed Hat:rhel_e4s:8.6::appstream From an advisory covering 4 CVEs | before 0:128.10.1-1.el8_6 | 0:128.10.1-1.el8_6 |
thunderbird-debugsourceRed Hat:rhel_e4s:8.6::appstream From an advisory covering 4 CVEs | before 0:128.10.1-1.el8_6 | 0:128.10.1-1.el8_6 |
thunderbirdRed Hat:rhel_tus:8.6::appstream From an advisory covering 4 CVEs | before 0:128.10.1-1.el8_6 | 0:128.10.1-1.el8_6 |
thunderbird-debuginfoRed Hat:rhel_tus:8.6::appstream From an advisory covering 4 CVEs | before 0:128.10.1-1.el8_6 | 0:128.10.1-1.el8_6 |
thunderbird-debugsourceRed Hat:rhel_tus:8.6::appstream From an advisory covering 4 CVEs | before 0:128.10.1-1.el8_6 | 0:128.10.1-1.el8_6 |
thunderbirdRed Hat:enterprise_linux:8::appstream From an advisory covering 13 CVEs | before 0:128.11.0-1.el8_10 | 0:128.11.0-1.el8_10 |
thunderbird-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 13 CVEs | before 0:128.11.0-1.el8_10 | 0:128.11.0-1.el8_10 |
thunderbird-debugsourceRed Hat:enterprise_linux:8::appstream From an advisory covering 13 CVEs | before 0:128.11.0-1.el8_10 | 0:128.11.0-1.el8_10 |
thunderbirdRed Hat:rhel_e4s:8.8::appstream From an advisory covering 4 CVEs | before 0:128.10.1-1.el8_8 | 0:128.10.1-1.el8_8 |
thunderbird-debuginfoRed Hat:rhel_e4s:8.8::appstream From an advisory covering 4 CVEs | before 0:128.10.1-1.el8_8 | 0:128.10.1-1.el8_8 |
thunderbird-debugsourceRed Hat:rhel_e4s:8.8::appstream From an advisory covering 4 CVEs | before 0:128.10.1-1.el8_8 | 0:128.10.1-1.el8_8 |
thunderbirdRed Hat:rhel_tus:8.8::appstream From an advisory covering 4 CVEs | before 0:128.10.1-1.el8_8 | 0:128.10.1-1.el8_8 |
thunderbird-debuginfoRed Hat:rhel_tus:8.8::appstream From an advisory covering 4 CVEs | before 0:128.10.1-1.el8_8 | 0:128.10.1-1.el8_8 |
thunderbird-debugsourceRed Hat:rhel_tus:8.8::appstream From an advisory covering 4 CVEs | before 0:128.10.1-1.el8_8 | 0:128.10.1-1.el8_8 |
thunderbirdRocky Linux:10 From an advisory covering 4 CVEs | before 0:128.10.1-1.el10_0 | 0:128.10.1-1.el10_0 |
thunderbirdRocky Linux:9 From an advisory covering 4 CVEs | before 0:128.10.1-1.el9_6 | 0:128.10.1-1.el9_6 |
thunderbirdRocky Linux:8 From an advisory covering 13 CVEs | before 0:128.11.0-1.el8_10 | 0:128.11.0-1.el8_10 |
MozillaThunderbirdSUSE:Linux Enterprise Module for Package Hub 15 SP6 From an advisory covering 4 CVEs | before 128.10.1-150200.8.215.1 | 128.10.1-150200.8.215.1 |
MozillaThunderbirdSUSE:Linux Enterprise Workstation Extension 15 SP6 From an advisory covering 4 CVEs | before 128.10.1-150200.8.215.1 | 128.10.1-150200.8.215.1 |
MozillaThunderbirdopenSUSE:Leap 15.6 From an advisory covering 4 CVEs | before 128.10.1-150200.8.215.1 | 128.10.1-150200.8.215.1 |
MozillaThunderbirdSUSE:Linux Enterprise Module for Package Hub 15 SP7 From an advisory covering 4 CVEs | before 128.10.1-150200.8.215.1 | 128.10.1-150200.8.215.1 |
MozillaThunderbirdSUSE:Linux Enterprise Workstation Extension 15 SP7 From an advisory covering 4 CVEs | before 128.10.1-150200.8.215.1 | 128.10.1-150200.8.215.1 |
MozillaThunderbirdopenSUSE:Tumbleweed From an advisory covering 4 CVEs | before 128.10.1-1.1 | 128.10.1-1.1 |
What each source reports
GitHub Advisories Score usedGHSA-69m9-2g5j-9m4h
A crafted HTML email using mailbox:/// links can trigger automatic, unsolicited downloads of .pdf...
A crafted HTML email using mailbox:/// links can trigger automatic, unsolicited downloads of .pdf files to the user's desktop or home directory without prompting, even if auto-saving is disabled. This behavior can be abused to fill the disk with garbage data (e.g. using /dev/urandom on Linux) or to leak Windows credentials via SMB links when the email is viewed in HTML mode. While user interaction is required to download the .pdf file, visual obfuscation can conceal the download trigger. Viewing the email in HTML mode is enough to load external content. This vulnerability affects Thunderbird < 128.10.1 and Thunderbird < 138.0.1.
- Record
GHSA-69m9-2g5j-9m4h- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
CVE ListNo score
This CVE was marked as fixed, but due to other code landing - was not actually fixed. It was subsequently fixed in CVE-2025-5986.
- Record
CVE-2025-3877- Updated
- 2026-11-02
EUVDEUVD-2025-14940
This CVE was marked as fixed, but due to other code landing - was not actually fixed. It was subsequently fixed in CVE-2025-5986.
- Record
EUVD-2025-14940- CVSS
- 0.0 None
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L - Updated
- 2026-11-02
NVDNo score
Rejected reason: This CVE was marked as fixed, but due to other code landing - was not actually fixed. It was subsequently fixed in CVE-2025-5986.
- Record
CVE-2025-3877- Updated
- 2026-11-02
OSVRHSA-2025:8196
Red Hat Security Advisory: thunderbird security update
- Record
RHSA-2025:8196- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-13
OSVRHSA-2025:8203
Red Hat Security Advisory: thunderbird security update
- Record
RHSA-2025:8203- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-13
Show 19 moreShow less
OSVRHSA-2025:8324
Red Hat Security Advisory: thunderbird security update
- Record
RHSA-2025:8324- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-13
OSVRHSA-2025:8325
Red Hat Security Advisory: thunderbird security update
- Record
RHSA-2025:8325- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-13
OSVRHSA-2025:8326
Red Hat Security Advisory: thunderbird security update
- Record
RHSA-2025:8326- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-13
OSVRHSA-2025:8391
Red Hat Security Advisory: thunderbird security update
- Record
RHSA-2025:8391- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-13
OSVRHSA-2025:8507
Red Hat Security Advisory: thunderbird security update
- Record
RHSA-2025:8507- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-13
OSVRHSA-2025:8594
Red Hat Security Advisory: thunderbird security update
- Record
RHSA-2025:8594- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-13
OSVRHSA-2025:8756
Red Hat Security Advisory: thunderbird security update
- Record
RHSA-2025:8756- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-13
OSVRHSA-2025:8784
Red Hat Security Advisory: thunderbird security update
- Record
RHSA-2025:8784- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-13
OSVRLSA-2025:8196
Important: thunderbird security update
Mozilla Thunderbird is a standalone mail and newsgroup client.
Security Fix(es):
thunderbird: JavaScript Execution via Spoofed PDF Attachment and file:/// Link (CVE-2025-3909)
thunderbird: Sender Spoofing via Malformed From Header in Thunderbird (CVE-2025-3875)
thunderbird: Unsolicited File Download, Disk Space Exhaustion, and Credential Leakage via mailbox:/// Links (CVE-2025-3877)
thunderbird: Tracking Links in Attachments Bypassed Remote Content Blocking (CVE-2025-3932)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2025:8196- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
OSVRLSA-2025:8203
Important: thunderbird security update
Mozilla Thunderbird is a standalone mail and newsgroup client.
Security Fix(es):
thunderbird: JavaScript Execution via Spoofed PDF Attachment and file:/// Link (CVE-2025-3909)
thunderbird: Sender Spoofing via Malformed From Header in Thunderbird (CVE-2025-3875)
thunderbird: Unsolicited File Download, Disk Space Exhaustion, and Credential Leakage via mailbox:/// Links (CVE-2025-3877)
thunderbird: Tracking Links in Attachments Bypassed Remote Content Blocking (CVE-2025-3932)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2025:8203- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
OSVRLSA-2025:8756
Important: thunderbird security update
Mozilla Thunderbird is a standalone mail and newsgroup client.
Security Fix(es):
thunderbird: JavaScript Execution via Spoofed PDF Attachment and file:/// Link (CVE-2025-3909)
thunderbird: Sender Spoofing via Malformed From Header in Thunderbird (CVE-2025-3875)
thunderbird: Unsolicited File Download, Disk Space Exhaustion, and Credential Leakage via mailbox:/// Links (CVE-2025-3877)
thunderbird: Tracking Links in Attachments Bypassed Remote Content Blocking (CVE-2025-3932)
firefox: thunderbird: Out-of-bounds access when resolving Promise objects (CVE-2025-4918)
firefox: thunderbird: Out-of-bounds access when optimizing linear sums (CVE-2025-4919)
firefox: thunderbird: Clickjacking vulnerability could have led to leaking saved payment card details (CVE-2025-5267)
firefox: thunderbird: Potential local code execution in ?Copy as cURL? command (CVE-2025-5264)
firefox: thunderbird: Memory safety bugs (CVE-2025-5268)
firefox: thunderbird: Script element events leaked cross-origin resource status (CVE-2025-5266)
firefox: thunderbird: Error handling for script execution was incorrectly isolated from web content (CVE-2025-5263)
firefox: thunderbird: Memory safety bug (CVE-2025-5269)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2025:8756- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2025-3877
Rejected reason: This CVE was marked as fixed, but due to other code landing - was not actually fixed. It was subsequently fixed in CVE-2025-5986.
- Record
UBUNTU-CVE-2025-3877- CVSS 3.1
- 5.4 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L - Updated
- 2026-11-02
OSVALSA-2025:8196No score
Important: thunderbird security update
Mozilla Thunderbird is a standalone mail and newsgroup client.
Security Fix(es):
- thunderbird: JavaScript Execution via Spoofed PDF Attachment and file:/// Link (CVE-2025-3909)
- thunderbird: Sender Spoofing via Malformed From Header in Thunderbird (CVE-2025-3875)
- thunderbird: Unsolicited File Download, Disk Space Exhaustion, and Credential Leakage via mailbox:/// Links (CVE-2025-3877)
- thunderbird: Tracking Links in Attachments Bypassed Remote Content Blocking (CVE-2025-3932)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2025:8196- Updated
- 2026-11-02
OSVALSA-2025:8756No score
Important: thunderbird security update
Mozilla Thunderbird is a standalone mail and newsgroup client.
Security Fix(es):
- thunderbird: JavaScript Execution via Spoofed PDF Attachment and file:/// Link (CVE-2025-3909)
- thunderbird: Sender Spoofing via Malformed From Header in Thunderbird (CVE-2025-3875)
- thunderbird: Unsolicited File Download, Disk Space Exhaustion, and Credential Leakage via mailbox:/// Links (CVE-2025-3877)
- thunderbird: Tracking Links in Attachments Bypassed Remote Content Blocking (CVE-2025-3932)
- firefox: thunderbird: Out-of-bounds access when resolving Promise objects (CVE-2025-4918)
- firefox: thunderbird: Out-of-bounds access when optimizing linear sums (CVE-2025-4919)
- firefox: thunderbird: Clickjacking vulnerability could have led to leaking saved payment card details (CVE-2025-5267)
- firefox: thunderbird: Potential local code execution in ?Copy as cURL? command (CVE-2025-5264)
- firefox: thunderbird: Memory safety bugs (CVE-2025-5268)
- firefox: thunderbird: Script element events leaked cross-origin resource status (CVE-2025-5266)
- firefox: thunderbird: Error handling for script execution was incorrectly isolated from web content (CVE-2025-5263)
- firefox: thunderbird: Memory safety bug (CVE-2025-5269)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2025:8756- Updated
- 2026-11-02
OSVNo score
Rejected reason: This CVE was marked as fixed, but due to other code landing - was not actually fixed. It was subsequently fixed in CVE-2025-5986.
- Record
CVE-2025-3877- Updated
- 2026-11-02
OSVMGASA-2025-0168No score
Updated thunderbird packages fix security vulnerabilities
Sender Spoofing via Malformed From Header in Thunderbird. (CVE-2025-3875) Unsolicited File Download, Disk Space Exhaustion, and Credential Leakage via mailbox:/// Links. (CVE-2025-3877) JavaScript Execution via Spoofed PDF Attachment and file:/// Link. (CVE-2025-3909) Tracking Links in Attachments Bypassed Remote Content Blocking. (CVE-2025-3932) Out-of-bounds access when resolving Promise objects. (CVE-2025-4918) Out-of-bounds access when optimizing linear sums. (CVE-2025-4919)
- Record
MGASA-2025-0168- Updated
- 2026-11-02
OSVopenSUSE-SU-2025:15131-1No score
MozillaThunderbird-128.10.1-1.1 on GA media
These are all security issues fixed in the MozillaThunderbird-128.10.1-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2025:15131-1- Updated
- 2026-11-02
OSVSUSE-SU-2025:01660-1No score
Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues:
Update to Mozilla Thunderbird 128.10.1.
Security fixes:
- MFSA 2025-34 (bsc#1243216)
- CVE-2025-3875: Sender Spoofing via Malformed From Header in Thunderbird.
- CVE-2025-3877: Unsolicited File Download, Disk Space Exhaustion, and Credential Leakage via mailbox:/// Links.
- CVE-2025-3909: JavaScript Execution via Spoofed PDF Attachment and file:/// Link.
- CVE-2025-3932: Tracking Links in Attachments Bypassed Remote Content Blocking.
Other bug fixes:
- Fixed: standalone message windows/tabs that no longer responded after folder compaction.
- Fixed: Thunderbird could crash when importing Outlook messages.
- Visual and UX improvements.
- Record
SUSE-SU-2025:01660-1- Updated
- 2026-11-02
OSVSUSE-SU-2025:01660-2No score
Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues:
Update to Mozilla Thunderbird 128.10.1.
Security fixes:
- MFSA 2025-34 (bsc#1243216)
- CVE-2025-3875: Sender Spoofing via Malformed From Header in Thunderbird.
- CVE-2025-3877: Unsolicited File Download, Disk Space Exhaustion, and Credential Leakage via mailbox:/// Links.
- CVE-2025-3909: JavaScript Execution via Spoofed PDF Attachment and file:/// Link.
- CVE-2025-3932: Tracking Links in Attachments Bypassed Remote Content Blocking.
Other bug fixes:
- Fixed: standalone message windows/tabs that no longer responded after folder compaction.
- Fixed: Thunderbird could crash when importing Outlook messages.
- Visual and UX improvements.
- Record
SUSE-SU-2025:01660-2- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| references | OSV | |
| affected, facts | ||
| affected | ||
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
nvd.nist.gov/vuln/detail/CVE-2025-3877
bugzilla.mozilla.org/show_bug.cgi?id=1958580
mozilla.org/security/advisories/mfsa2025-34
github.com/advisories/GHSA-69m9-2g5j-9m4h
access.redhat.com/errata/RHSA-2025:8196
Show 108 moreShow less
bugzilla.redhat.com/2366283
errata.almalinux.org/10/ALSA-2025-8196.html
security-tracker.debian.org/tracker/CVE-2025-3877
advisories.mageia.org/MGASA-2025-0168.html
bugs.mageia.org/show_bug.cgi?id=34288
thunderbird.net/en-US/thunderbird/128.10.1esr/releasenotes
security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_8196.json
cve.org/CVERecord?id=CVE-2025-3875
chromereleases.googleblog.com/2025/05/stable-channel-update-for-desktop_27.html
errata.rockylinux.org/RLSA-2025:8196
suse.com/support/update/announcement/2025/suse-su-202501660-1
bugzilla.suse.com/1243216
ubuntu.com/security/CVE-2025-3877
lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/DSFDWDAINA2OZWCXINCXQQLCGCNKIVEK