Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-26696

Опубликовано: 10 мар. 2025
Источник: nvd
CVSS3: 7
EPSS Низкий

Описание

Certain crafted MIME email messages that claimed to contain an encrypted OpenPGP message, which instead contained an OpenPGP signed message, were wrongly shown as being encrypted. This vulnerability was fixed in Thunderbird 136 and Thunderbird 128.8.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*
Версия до 128.8.0 (исключая)
cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*
Версия от 129.0 (включая) до 136.0 (исключая)

EPSS

Процентиль: 26%
0.00331
Низкий

7 High

CVSS3

Дефекты

CWE-290

Связанные уязвимости

CVSS3: 7
ubuntu
больше 1 года назад

Certain crafted MIME email messages that claimed to contain an encrypted OpenPGP message, which instead contained an OpenPGP signed message, were wrongly shown as being encrypted. This vulnerability was fixed in Thunderbird 136 and Thunderbird 128.8.

CVSS3: 5.3
redhat
больше 1 года назад

Certain crafted MIME email messages that claimed to contain an encrypted OpenPGP message, which instead contained an OpenPGP signed message, were wrongly shown as being encrypted. This vulnerability was fixed in Thunderbird 136 and Thunderbird 128.8.

CVSS3: 7
debian
больше 1 года назад

Certain crafted MIME email messages that claimed to contain an encrypt ...

CVSS3: 7
github
больше 1 года назад

Certain crafted MIME email messages that claimed to contain an encrypted OpenPGP message, which instead contained an OpenPGP signed message, were wrongly shown as being encrypted. This vulnerability affects Thunderbird < 136 and Thunderbird < 128.8.

CVSS3: 6.3
fstec
больше 1 года назад

Уязвимость почтового клиента Thunderbird, связанная с ошибками представления информации пользовательским интерфейсом, позволяющая нарушителю раскрыть защищаемую информацию

EPSS

Процентиль: 26%
0.00331
Низкий

7 High

CVSS3

Дефекты

CWE-290