Summary
Ein Angreifer kann eine Schwachstelle in Mozilla Thunderbird ausnutzen, um Informationen offenzulegen.
Product
Thunderbird ist ein Open Source E-Mail Client.
Vulnerabilities 1
-
Medium 4.3
CSS-based exfiltration of the content from partially encrypted emails when allowing remote content
When a user explicitly requested Thunderbird to decrypt an inline OpenPGP message that was embedded in a text section of an email that was formatted and styled with HTML and CSS, then the decrypted contents were rendered in a context in which the CSS styles f…
Revision history
-
#5
Neue Updates von SUSE aufgenommen
-
#4
Neue Updates von Debian aufgenommen
-
#3
Neue Updates von Ubuntu aufgenommen
-
#2
Referenz(en) aufgenommen: EUVD-2026-4880
-
#1
Initiale Fassung
References
-
Mozilla Foundation Security Advisory vom 2026-01-27
https://www.mozilla.org/en-US/security/advisories/mfsa2026-08/
-
Mozilla Foundation Security Advisory vom 2026-01-27
https://www.mozilla.org/en-US/security/advisories/mfsa2026-07/
-
Ubuntu Security Notice USN-7991-1 vom 2026-02-03
https://ubuntu.com/security/notices/USN-7991-1
-
Debian Security Advisory DLA-4466 vom 2026-02-04
https://lists.debian.org/debian-lts-announce/2026/02/msg00005.html
-
Debian Security Advisory DSA-6118 vom 2026-02-03
https://lists.debian.org/debian-security-announce/2026/msg00027.html
-
SUSE Security Update SUSE-SU-2026:0388-1 vom 2026-02-05
https://lists.suse.com/pipermail/sle-security-updates/2026-February/024060.html