Skip to content
OpenAdvisories
Critical RHSA-2025:10196 5 CVEs

Red Hat Security Advisory: thunderbird security update

Published Jul 3, 2025 · Updated Jun 30, 2026

Ecosystem: Red Hat

Fixed packages 3

ReleasePackageFixed in
Red Hat · RHEL 9 enterprise_linux:9::appstream thunderbird 0:128.12.0-1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream thunderbird-debuginfo 0:128.12.0-1.el9_6
Red Hat · RHEL 9 enterprise_linux:9::appstream thunderbird-debugsource 0:128.12.0-1.el9_6

Vulnerabilities 5

  • Critical 9.8
    CVE-2025-6424

    Use-after-free in FontFaceSet

    A use-after-free in FontFaceSet resulted in a potentially exploitable crash. This vulnerability was fixed in Firefox 140, Firefox ESR 115.25, Firefox ESR 128.12, Thunderbird 140, and Thunderbird 128.12.

    Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  • Medium 6.5
    CVE-2025-5986

    Unsolicited File Download, Disk Space Exhaustion, and Credential Leakage via mailbox:/// Links

    A crafted HTML email using mailbox:/// links can trigger automatic, unsolicited downloads of .pdf files to the user's desktop or home directory without prompting, even if auto-saving is disabled. This behavior can be abused to fill the disk with garbage data …

    Mozilla Thunderbird thunderbird thunderbird Debian Ubuntu
  • Medium 6.5
    CVE-2025-6429

    Incorrect parsing of URLs could have allowed embedding of youtube.com

    Firefox could have incorrectly parsed a URL and rewritten it to the youtube.com domain when parsing the URL specified in an `embed` tag. This could have bypassed website security checks that restricted which domains users were allowed to embed. This vulnerabi…

    Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  • Medium 6.1
    CVE-2025-6430

    Content-Disposition header ignored when a file is included in an embed or object tag

    When a file download is specified via the `Content-Disposition` header, that directive would be ignored if the file was included via a `<embed>` or `<object>` tag, potentially making a website vulnerable to a cross-site scripting attack. This vuln…

    Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  • Medium 4.3
    CVE-2025-6425

    The WebCompat WebExtension shipped with Firefox exposed a persistent UUID

    An attacker who enumerated resources from the WebCompat extension could have obtained a persistent UUID that identified the browser, and persisted between containers and normal/private browsing mode, but not profiles. This vulnerability was fixed in Firefox 1…

    Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2372281
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10196.json
  • report
    https://access.redhat.com/security/cve/CVE-2025-5986
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-5986
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-5986
  • article
    https://www.mozilla.org/en-US/security/advisories/mfsa2025-49/#CVE-2025-5986
  • report
    https://access.redhat.com/security/cve/CVE-2025-6424
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2374559
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-6424
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-6424
  • article
    https://www.mozilla.org/security/advisories/mfsa2025-53/#CVE-2025-6424
  • report
    https://access.redhat.com/security/cve/CVE-2025-6425
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2374562
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-6425
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-6425
  • article
    https://www.mozilla.org/security/advisories/mfsa2025-53/#CVE-2025-6425
  • report
    https://access.redhat.com/security/cve/CVE-2025-6429
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2374561
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-6429
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-6429
  • article
    https://www.mozilla.org/security/advisories/mfsa2025-53/#CVE-2025-6429
  • report
    https://access.redhat.com/security/cve/CVE-2025-6430
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2374555
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-6430
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-6430
  • article
    https://www.mozilla.org/security/advisories/mfsa2025-53/#CVE-2025-6430