Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-26696

Опубликовано: 10 мар. 2025
Источник: nvd
CVSS3: 7
EPSS Низкий

Описание

Certain crafted MIME email messages that claimed to contain an encrypted OpenPGP message, which instead contained an OpenPGP signed message, were wrongly shown as being encrypted. This vulnerability affects Thunderbird < 136 and Thunderbird < 128.8.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*
Версия до 128.8.0 (исключая)
cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*
Версия от 129.0 (включая) до 136.0 (исключая)

EPSS

Процентиль: 40%
0.00182
Низкий

7 High

CVSS3

Дефекты

CWE-290

Связанные уязвимости

CVSS3: 7
ubuntu
11 месяцев назад

Certain crafted MIME email messages that claimed to contain an encrypted OpenPGP message, which instead contained an OpenPGP signed message, were wrongly shown as being encrypted. This vulnerability affects Thunderbird < 136 and Thunderbird < 128.8.

CVSS3: 5.3
redhat
11 месяцев назад

Certain crafted MIME email messages that claimed to contain an encrypted OpenPGP message, which instead contained an OpenPGP signed message, were wrongly shown as being encrypted. This vulnerability affects Thunderbird < 136 and Thunderbird < 128.8.

CVSS3: 7
debian
11 месяцев назад

Certain crafted MIME email messages that claimed to contain an encrypt ...

CVSS3: 7
github
11 месяцев назад

Certain crafted MIME email messages that claimed to contain an encrypted OpenPGP message, which instead contained an OpenPGP signed message, were wrongly shown as being encrypted. This vulnerability affects Thunderbird < 136 and Thunderbird < 128.8.

CVSS3: 6.3
fstec
12 месяцев назад

Уязвимость почтового клиента Thunderbird, связанная с ошибками представления информации пользовательским интерфейсом, позволяющая нарушителю раскрыть защищаемую информацию

EPSS

Процентиль: 40%
0.00182
Низкий

7 High

CVSS3

Дефекты

CWE-290