Multiple vulnerabilities in Mozilla Thunderbird, including remote code execution, security restriction bypass, and information disclosure, can be exploited by a remote attacker. Affected versions are those prior to Thunderbird 140.10.1 and Thunderbird 150.0.1. The solution is to apply the vendor-provided fixes by upgrading to Thunderbird 140.10.1 or Thunderbird 150.0.1.
Multiple vulnerabilities were identified in Mozilla Thunderbird. A remote attacker could exploit some of these vulnerabilities to trigger sensitive information disclosure, remote code execution and security restriction bypass on the targeted system. Impact Remote Code Execution Security Restriction Bypass Information Disclosure System / Technologies affected Versions prior to: Thunderbird 140.10.1 Thunderbird 150.0.1 Solutions Before installation of the software, please visit the vendor web-site for more details. Apply fixes issued by the vendor: Thunderbird 140.10.1 Thunderbird 150.0.1