TI-2025-05825 CVE-2025-6424 · GHSA-87c4-94w2-rw7j
Use-after-free in FontFaceSet
Priority MEDIUM 60
A use-after-free in FontFaceSet resulted in a potentially exploitable crash.
RHSA-2025:10195
thunderbird security update
Released 2025-07-02 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 10) thunderbird-128.12.0-1.el10_0
Fixes 5 records
TI-2025-05408 CVE-2025-5986 · GHSA-q7fj-77gc-45xq
Unsolicited File Download, Disk Space Exhaustion, and Credential Leakage via mailbox:/// Links
Priority LOW 30
A crafted HTML email using mailbox:/// links can trigger automatic, unsolicited downloads of .pdf files to the user's desktop or home directory without prompting, even if auto-saving is disabled.
TI-2025-05830 CVE-2025-6429 · GHSA-8r38-4g4q-hgvw
Incorrect parsing of URLs could have allowed embedding of youtube.com
Priority LOW 29
Firefox could have incorrectly parsed a URL and rewritten it to the youtube.com domain when parsing the URL specified in an `embed` tag.
TI-2025-05831 CVE-2025-6430 · GHSA-fvqv-c5hj-jcrp
Content-Disposition header ignored when a file is included in an embed or object tag
Priority LOW 27
When a file download is specified via the `Content-Disposition` header, that directive would be ignored if the file was included via a `<embed>` or `<object>` tag, potentially making a website vulnerable to a…
TI-2025-05826 CVE-2025-6425 · GHSA-2h3c-qrcw-962q
The WebCompat WebExtension shipped with Firefox exposed a persistent UUID
Priority LOW 20
An attacker who enumerated resources from the WebCompat extension could have obtained a persistent UUID that identified the browser, and persisted between containers and normal/private browsing mode, but not profiles.