GHSA-wc7r-3c8h-4jrfunknown

When replying to, forwarding, or editing a crafted email message as new, Thunderbird could embed...

Published
October 27, 2026
Last Modified
October 27, 2026

🔗 CVE IDs covered (1)

📋 Description

When replying to, forwarding, or editing a crafted email message as new, Thunderbird could embed parts of a different message stored in the same folder into the message being composed, without showing a blocked content warning. If the user sent the message, the content of the other message was disclosed to the recipients. This vulnerability was fixed in Thunderbird 159 and Thunderbird 153.6.

🔗 References (5)