{"id":"CVE-2025-3877","aliases":["ALSA-2025:8196","ALSA-2025:8756","EUVD-2025-14940","GHSA-69m9-2g5j-9m4h","MGASA-2025-0168","RHSA-2025:8196","RHSA-2025:8203","RHSA-2025:8324","RHSA-2025:8325","RHSA-2025:8326","RHSA-2025:8391","RHSA-2025:8507","RHSA-2025:8594","RHSA-2025:8756","RHSA-2025:8784","RLSA-2025:8196","RLSA-2025:8203","RLSA-2025:8756","SUSE-SU-2025:01660-1","SUSE-SU-2025:01660-2","UBUNTU-CVE-2025-3877","openSUSE-SU-2025:15131-1"],"status":"rejected","title":"A crafted HTML email using mailbox:/// links can trigger automatic, unsolicited downloads of .pdf...","description":"This CVE was marked as fixed, but due to other code landing - was not actually fixed.  It was subsequently fixed in CVE-2025-5986.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","from":"ghsa"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-200"],"published":"2025-05-14T16:56:43Z","modified":"2026-11-13T19:03:31Z","affected":[{"source":"osv","ecosystem":"AlmaLinux:10","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.10.1-1.el10_0.alma.1"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.11.0-1.el8_10.alma.1"}]}],"bundled":12},{"source":"osv","ecosystem":"Mageia:9","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.10.2-1.mga9"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:9","package":"thunderbird-l10n","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.10.2-1.mga9"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.10.1-1.el10_0"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.10.1-1.el10_0"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.0","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.10.1-1.el10_0"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.10.1-1.el9_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.10.1-1.el9_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.10.1-1.el9_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.10.1-1.el9_0"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.10.1-1.el9_0"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.10.1-1.el9_0"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.10.1-1.el9_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.10.1-1.el9_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.10.1-1.el9_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.10.1-1.el9_2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.10.1-1.el9_2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.10.1-1.el9_2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.10.1-1.el8_2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.10.1-1.el8_2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.10.1-1.el8_2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.10.1-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.10.1-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.10.1-1.el8_4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.10.1-1.el8_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.10.1-1.el8_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.10.1-1.el8_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.10.1-1.el8_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.10.1-1.el8_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.10.1-1.el8_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.10.1-1.el8_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.10.1-1.el8_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.10.1-1.el8_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.11.0-1.el8_10"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.11.0-1.el8_10"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.11.0-1.el8_10"}]}],"bundled":13},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.10.1-1.el8_8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.10.1-1.el8_8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.10.1-1.el8_8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.10.1-1.el8_8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.10.1-1.el8_8"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.10.1-1.el8_8"}]}],"bundled":4},{"source":"osv","ecosystem":"Rocky Linux:10","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.10.1-1.el10_0"}]}],"bundled":4},{"source":"osv","ecosystem":"Rocky Linux:9","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.10.1-1.el9_6"}]}],"bundled":4},{"source":"osv","ecosystem":"Rocky Linux:8","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:128.11.0-1.el8_10"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP6","package":"MozillaThunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.10.1-150200.8.215.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP6","package":"MozillaThunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.10.1-150200.8.215.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"MozillaThunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.10.1-150200.8.215.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP7","package":"MozillaThunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.10.1-150200.8.215.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP7","package":"MozillaThunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.10.1-150200.8.215.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"MozillaThunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.10.1-1.1"}]}],"bundled":4}],"products":[{"vendor":"mozilla","product":"thunderbird"}],"references":[{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-3877"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1958580","tags":["report"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2025-34"},{"url":"https://www.mozilla.org/security/advisories/mfsa2025-35"},{"url":"https://github.com/advisories/GHSA-69m9-2g5j-9m4h"},{"url":"https://access.redhat.com/errata/RHSA-2025:8196","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-3875","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-3877","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-3909","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-3932","tags":["report"]},{"url":"https://bugzilla.redhat.com/2366283","tags":["report"]},{"url":"https://bugzilla.redhat.com/2366287","tags":["report"]},{"url":"https://bugzilla.redhat.com/2366291","tags":["report"]},{"url":"https://bugzilla.redhat.com/2366297","tags":["report"]},{"url":"https://errata.almalinux.org/10/ALSA-2025-8196.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:8756","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-4918","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-4919","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-5263","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-5264","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-5266","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-5267","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-5268","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-5269","tags":["report"]},{"url":"https://bugzilla.redhat.com/2367016","tags":["report"]},{"url":"https://bugzilla.redhat.com/2367018","tags":["report"]},{"url":"https://bugzilla.redhat.com/2368750","tags":["report"]},{"url":"https://bugzilla.redhat.com/2368751","tags":["report"]},{"url":"https://bugzilla.redhat.com/2368752","tags":["report"]},{"url":"https://bugzilla.redhat.com/2368755","tags":["report"]},{"url":"https://bugzilla.redhat.com/2368756","tags":["report"]},{"url":"https://bugzilla.redhat.com/2368757","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2025-8756.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-3877","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2025-0168.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=34288","tags":["report"]},{"url":"https://www.thunderbird.net/en-US/thunderbird/128.10.1esr/releasenotes/","tags":["web"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2025-34/","tags":["advisory"]},{"url":"https://www.thunderbird.net/en-US/thunderbird/128.10.2esr/releasenotes/","tags":["web"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2366283","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2366287","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2366291","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2366297","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_8196.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-3875","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-3875","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2025-34/#CVE-2025-3875","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-3877","tags":["advisory","report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-3909","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-3909","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2025-34/#CVE-2025-3909","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-3932","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-3932","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2025-34/#CVE-2025-3932","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2025:8203","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_8203.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:8324","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_8324.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:8325","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_8325.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:8326","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_8326.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:8391","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_8391.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:8507","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_8507.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:8594","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_8594.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2367016","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2367018","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2368750","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2368751","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2368752","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2368755","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2368756","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2368757","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_8756.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-4918","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-4918","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2025-37/#CVE-2025-4918","tags":["article"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2025-40/#CVE-2025-4918","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-4919","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-4919","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2025-37/#CVE-2025-4919","tags":["article"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2025-40/#CVE-2025-4919","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-5263","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-5263","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2025-44/#CVE-2025-5263","tags":["article"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2025-46/#CVE-2025-5263","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-5264","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-5264","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2025-44/#CVE-2025-5264","tags":["article"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2025-46/#CVE-2025-5264","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-5266","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-5266","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2025-44/#CVE-2025-5266","tags":["article"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2025-46/#CVE-2025-5266","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-5267","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-5267","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2025-44/#CVE-2025-5267","tags":["article"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2025-46/#CVE-2025-5267","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-5268","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-5268","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2025-44/#CVE-2025-5268","tags":["article"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2025-46/#CVE-2025-5268","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-5269","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-5269","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2025-44/#CVE-2025-5269","tags":["article"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2025-46/#CVE-2025-5269","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-5283","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2368749","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-5283","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-5283","tags":["advisory"]},{"url":"https://chromereleases.googleblog.com/2025/05/stable-channel-update-for-desktop_27.html","tags":["article"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2025-44/#CVE-2025-5283","tags":["article"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2025-46/","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2025:8784","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_8784.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2025:8196","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2025:8203","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2025:8756","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202501660-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1243216","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-3875","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-3877","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-3909","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-3932","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202501660-2/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-3877","tags":["report"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2025-34/#CVE-2025-3877","tags":["report"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2025-34/","tags":["report"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2025-35/","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/DSFDWDAINA2OZWCXINCXQQLCGCNKIVEK/","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2025-3877","description":"This CVE was marked as fixed, but due to other code landing - was not actually fixed.  It was subsequently fixed in CVE-2025-5986.","status":"rejected","published":"2025-05-14T16:56:43.402Z","modified":"2025-06-11T12:10:53.177Z","updated_at":"2026-11-02T14:32:39.378527Z"}],"euvd":[{"id":"EUVD-2025-14940","description":"This CVE was marked as fixed, but due to other code landing - was not actually fixed.  It was subsequently fixed in CVE-2025-5986.","status":"published","published":"2025-05-14T16:56:43Z","modified":"2025-06-11T12:10:53Z","cvss":[{"version":"","score":0,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","level":"none"}],"updated_at":"2026-11-02T20:32:26.351797Z"}],"ghsa":[{"id":"GHSA-69m9-2g5j-9m4h","title":"A crafted HTML email using mailbox:/// links can trigger automatic, unsolicited downloads of .pdf...","description":"A crafted HTML email using mailbox:/// links can trigger automatic, unsolicited downloads of .pdf files to the user's desktop or home directory without prompting, even if auto-saving is disabled. This behavior can be abused to fill the disk with garbage data (e.g. using /dev/urandom on Linux) or to leak Windows credentials via SMB links when the email is viewed in HTML mode. While user interaction is required to download the .pdf file, visual obfuscation can conceal the download trigger. Viewing the email in HTML mode is enough to load external content. This vulnerability affects Thunderbird \u003c 128.10.1 and Thunderbird \u003c 138.0.1.","status":"published","published":"2025-05-14T18:30:47Z","modified":"2025-05-15T15:32:28Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T15:02:18.914991Z"}],"nvd":[{"id":"CVE-2025-3877","description":"Rejected reason: This CVE was marked as fixed, but due to other code landing - was not actually fixed.  It was subsequently fixed in CVE-2025-5986.","status":"rejected","published":"2025-05-14T17:15:48.567Z","modified":"2025-06-11T13:15:24.007Z","updated_at":"2026-11-02T14:11:08.321805Z"}],"osv":[{"id":"RHSA-2025:8196","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2025-05-28T10:07:45Z","modified":"2026-11-13T19:03:30.39081099Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-13T19:24:44.55688Z"},{"id":"RHSA-2025:8203","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2025-05-28T10:07:47Z","modified":"2026-11-13T19:03:30.48430383Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-13T19:24:44.55688Z"},{"id":"RHSA-2025:8324","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2025-05-30T10:03:24Z","modified":"2026-11-13T19:03:30.486708769Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-13T19:24:44.55688Z"},{"id":"RHSA-2025:8325","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2025-05-30T10:03:24Z","modified":"2026-11-13T19:03:30.499361318Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-13T19:24:44.55688Z"},{"id":"RHSA-2025:8326","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2025-05-30T10:03:25Z","modified":"2026-11-13T19:03:30.538003436Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-13T19:24:44.55688Z"},{"id":"RHSA-2025:8391","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2025-06-03T10:05:10Z","modified":"2026-11-13T19:03:30.484665125Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-13T19:24:44.55688Z"},{"id":"RHSA-2025:8507","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2025-06-05T10:04:31Z","modified":"2026-11-13T19:03:30.56502204Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-13T19:24:44.55688Z"},{"id":"RHSA-2025:8594","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2025-06-06T10:02:52Z","modified":"2026-11-13T19:03:31.095039693Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-13T19:24:44.55688Z"},{"id":"RHSA-2025:8756","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2025-06-11T10:03:46Z","modified":"2026-11-13T19:03:30.853219802Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-13T19:24:44.55688Z"},{"id":"RHSA-2025:8784","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2025-06-11T10:03:46Z","modified":"2026-11-13T19:03:30.793389943Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-13T19:24:44.55688Z"},{"id":"RLSA-2025:8196","title":"Important: thunderbird security update","description":"Mozilla Thunderbird is a standalone mail and newsgroup client.\n\nSecurity Fix(es):\n\n* thunderbird: JavaScript Execution via Spoofed PDF Attachment and file:/// Link (CVE-2025-3909)\n\n* thunderbird: Sender Spoofing via Malformed From Header in Thunderbird (CVE-2025-3875)\n\n* thunderbird: Unsolicited File Download, Disk Space Exhaustion, and Credential Leakage via mailbox:/// Links (CVE-2025-3877)\n\n* thunderbird: Tracking Links in Attachments Bypassed Remote Content Blocking (CVE-2025-3932)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-10-03T19:56:45.27031Z","modified":"2025-10-08T17:12:41.26333Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:25.508922Z"},{"id":"RLSA-2025:8203","title":"Important: thunderbird security update","description":"Mozilla Thunderbird is a standalone mail and newsgroup client.\n\nSecurity Fix(es):\n\n* thunderbird: JavaScript Execution via Spoofed PDF Attachment and file:/// Link (CVE-2025-3909)\n\n* thunderbird: Sender Spoofing via Malformed From Header in Thunderbird (CVE-2025-3875)\n\n* thunderbird: Unsolicited File Download, Disk Space Exhaustion, and Credential Leakage via mailbox:/// Links (CVE-2025-3877)\n\n* thunderbird: Tracking Links in Attachments Bypassed Remote Content Blocking (CVE-2025-3932)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-10-04T00:11:30.91642Z","modified":"2025-10-04T00:49:57.962764Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:53:25.508922Z"},{"id":"RLSA-2025:8756","title":"Important: thunderbird security update","description":"Mozilla Thunderbird is a standalone mail and newsgroup client.\n\nSecurity Fix(es):\n\n* thunderbird: JavaScript Execution via Spoofed PDF Attachment and file:/// Link (CVE-2025-3909)\n\n* thunderbird: Sender Spoofing via Malformed From Header in Thunderbird (CVE-2025-3875)\n\n* thunderbird: Unsolicited File Download, Disk Space Exhaustion, and Credential Leakage via mailbox:/// Links (CVE-2025-3877)\n\n* thunderbird: Tracking Links in Attachments Bypassed Remote Content Blocking (CVE-2025-3932)\n\n* firefox: thunderbird: Out-of-bounds access when resolving Promise objects (CVE-2025-4918)\n\n* firefox: thunderbird: Out-of-bounds access when optimizing linear sums (CVE-2025-4919)\n\n* firefox: thunderbird: Clickjacking vulnerability could have led to leaking saved payment card details (CVE-2025-5267)\n\n* firefox: thunderbird: Potential local code execution in ?Copy as cURL? command (CVE-2025-5264)\n\n* firefox: thunderbird: Memory safety bugs (CVE-2025-5268)\n\n* firefox: thunderbird: Script element events leaked cross-origin resource status (CVE-2025-5266)\n\n* firefox: thunderbird: Error handling for script execution was incorrectly isolated from web content (CVE-2025-5263)\n\n* firefox: thunderbird: Memory safety bug (CVE-2025-5269)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-07-29T13:38:41.630147Z","modified":"2025-07-29T15:00:12.450029Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.508922Z"},{"id":"UBUNTU-CVE-2025-3877","description":"Rejected reason: This CVE was marked as fixed, but due to other code landing - was not actually fixed.  It was subsequently fixed in CVE-2025-5986.","status":"withdrawn","published":"2025-05-14T17:15:00Z","modified":"2025-07-08T14:59:44.174783Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T16:55:40.454384Z"},{"id":"ALSA-2025:8196","title":"Important: thunderbird security update","description":"Mozilla Thunderbird is a standalone mail and newsgroup client.  \n\nSecurity Fix(es):  \n\n  * thunderbird: JavaScript Execution via Spoofed PDF Attachment and file:/// Link (CVE-2025-3909)\n  * thunderbird: Sender Spoofing via Malformed From Header in Thunderbird (CVE-2025-3875)\n  * thunderbird: Unsolicited File Download, Disk Space Exhaustion, and Credential Leakage via mailbox:/// Links (CVE-2025-3877)\n  * thunderbird: Tracking Links in Attachments Bypassed Remote Content Blocking (CVE-2025-3932)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2025-05-27T00:00:00Z","modified":"2026-10-29T11:58:11.896808Z","updated_at":"2026-11-02T15:27:53.448565Z"},{"id":"ALSA-2025:8756","title":"Important: thunderbird security update","description":"Mozilla Thunderbird is a standalone mail and newsgroup client.  \n\nSecurity Fix(es):  \n\n  * thunderbird: JavaScript Execution via Spoofed PDF Attachment and file:/// Link (CVE-2025-3909)\n  * thunderbird: Sender Spoofing via Malformed From Header in Thunderbird (CVE-2025-3875)\n  * thunderbird: Unsolicited File Download, Disk Space Exhaustion, and Credential Leakage via mailbox:/// Links (CVE-2025-3877)\n  * thunderbird: Tracking Links in Attachments Bypassed Remote Content Blocking (CVE-2025-3932)\n  * firefox: thunderbird: Out-of-bounds access when resolving Promise objects (CVE-2025-4918)\n  * firefox: thunderbird: Out-of-bounds access when optimizing linear sums (CVE-2025-4919)\n  * firefox: thunderbird: Clickjacking vulnerability could have led to leaking saved payment card details (CVE-2025-5267)\n  * firefox: thunderbird: Potential local code execution in ?Copy as cURL? command (CVE-2025-5264)\n  * firefox: thunderbird: Memory safety bugs (CVE-2025-5268)\n  * firefox: thunderbird: Script element events leaked cross-origin resource status (CVE-2025-5266)\n  * firefox: thunderbird: Error handling for script execution was incorrectly isolated from web content (CVE-2025-5263)\n  * firefox: thunderbird: Memory safety bug (CVE-2025-5269)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2025-06-10T00:00:00Z","modified":"2026-10-29T11:02:23.525058059Z","updated_at":"2026-11-02T15:27:53.875139Z"},{"id":"CVE-2025-3877","description":"Rejected reason: This CVE was marked as fixed, but due to other code landing - was not actually fixed.  It was subsequently fixed in CVE-2025-5986.","status":"withdrawn","published":"2025-05-14T17:15:48Z","modified":"2026-04-16T04:30:59.217343598Z","updated_at":"2026-11-02T15:44:49.052395Z"},{"id":"MGASA-2025-0168","title":"Updated thunderbird packages fix security vulnerabilities","description":"Sender Spoofing via Malformed From Header in Thunderbird.\n(CVE-2025-3875)\nUnsolicited File Download, Disk Space Exhaustion, and Credential Leakage\nvia mailbox:/// Links. (CVE-2025-3877)\nJavaScript Execution via Spoofed PDF Attachment and file:/// Link.\n(CVE-2025-3909)\nTracking Links in Attachments Bypassed Remote Content Blocking.\n(CVE-2025-3932)\nOut-of-bounds access when resolving Promise objects. (CVE-2025-4918)\nOut-of-bounds access when optimizing linear sums. (CVE-2025-4919)\n","status":"published","published":"2025-05-27T18:46:33Z","modified":"2026-04-16T04:40:57.115501319Z","updated_at":"2026-11-02T15:49:43.178336Z"},{"id":"openSUSE-SU-2025:15131-1","title":"MozillaThunderbird-128.10.1-1.1 on GA media","description":"These are all security issues fixed in the MozillaThunderbird-128.10.1-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-05-20T00:00:00Z","modified":"2026-02-05T11:50:37.201842Z","updated_at":"2026-11-02T16:58:37.399567Z"},{"id":"SUSE-SU-2025:01660-1","title":"Security update for MozillaThunderbird","description":"This update for MozillaThunderbird fixes the following issues:\n\nUpdate to Mozilla Thunderbird 128.10.1.\n\nSecurity fixes:\n\n- MFSA 2025-34 (bsc#1243216)\n  * CVE-2025-3875: Sender Spoofing via Malformed From Header in Thunderbird.\n  * CVE-2025-3877: Unsolicited File Download, Disk Space Exhaustion, and Credential Leakage via mailbox:/// Links.\n  * CVE-2025-3909: JavaScript Execution via Spoofed PDF Attachment and file:/// Link.\n  * CVE-2025-3932: Tracking Links in Attachments Bypassed Remote Content Blocking.\n\nOther bug fixes:\n\n- Fixed: standalone message windows/tabs that no longer responded after folder compaction.\n- Fixed: Thunderbird could crash when importing Outlook messages.\n- Visual and UX improvements.\n","status":"published","published":"2025-05-22T16:01:46Z","modified":"2026-02-04T03:08:45.14485Z","updated_at":"2026-11-02T15:53:56.123059Z"},{"id":"SUSE-SU-2025:01660-2","title":"Security update for MozillaThunderbird","description":"This update for MozillaThunderbird fixes the following issues:\n\nUpdate to Mozilla Thunderbird 128.10.1.\n\nSecurity fixes:\n\n- MFSA 2025-34 (bsc#1243216)\n  * CVE-2025-3875: Sender Spoofing via Malformed From Header in Thunderbird.\n  * CVE-2025-3877: Unsolicited File Download, Disk Space Exhaustion, and Credential Leakage via mailbox:/// Links.\n  * CVE-2025-3909: JavaScript Execution via Spoofed PDF Attachment and file:/// Link.\n  * CVE-2025-3932: Tracking Links in Attachments Bypassed Remote Content Blocking.\n\nOther bug fixes:\n\n- Fixed: standalone message windows/tabs that no longer responded after folder compaction.\n- Fixed: Thunderbird could crash when importing Outlook messages.\n- Visual and UX improvements.\n","status":"published","published":"2025-05-29T09:33:54Z","modified":"2026-03-23T04:49:29.915823Z","updated_at":"2026-11-02T15:53:56.123059Z"}]}}