Read the docs
TI-2022-01086 Aliases CVE-2022-1197GHSA-h922-mv7w-mhm4

Improper certificate validation in Mozilla Thunderbird

Priority LOW 25CWE-295Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
Spoofing
Confidentiality · integrity · availability
Low · Low · None
Fix status
Partial Red Hat: 7 fixed, 1 without a fix

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA and Red Hat. Impact type from CWE-295.

Summary

When importing a revoked key that specified key compromise as the revocation reason, Thunderbird did not update the existing copy of the key that was not yet revoked, and the existing key was kept as non-revoked. Revocation statements that used another revocation reason, or that didn't specify a revocation reason, were unaffected. This vulnerability affects Thunderbird < 91.8.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00397 34th percentileScored 2026-11-07
Fix Partial Thunderbird (Mozilla): 91.8Red Hat: 5 advisoriesRed Hat: 7 fixed, 1 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
MozillaThunderbirdbefore 91.891.8Patch availableCNA
  • Thunderbird VendorMozilla Affected before 91.8 Fixed in 91.8 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*before 91.8VulnerableMozilla
  • cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:* Versions before 91.8 Vulnerable ·Mozilla

Remediation

  • Fix · CNA Thunderbird (Mozilla) Fixed in 91.8

Red Hat 5 advisories

  • RHSA-2022:1326 Released 2022-04-12 · Red Hat rating Important
    thunderbird security update
    • Red Hat Enterprise Linux AppStream EUS (v. 8.2) thunderbird-91.8.0-1.el8_2
  • RHSA-2022:1302 Released 2022-04-11 · Red Hat rating Important
    thunderbird security update
    • Red Hat Enterprise Linux Client (v. 7) thunderbird-91.8.0-1.el7_9
    • Red Hat Enterprise Linux Server Optional (v. 7) thunderbird-91.8.0-1.el7_9
    • Red Hat Enterprise Linux Workstation (v. 7) thunderbird-91.8.0-1.el7_9
  • RHSA-2022:1305 Released 2022-04-11 · Red Hat rating Important
    thunderbird security update
    • Red Hat Enterprise Linux AppStream EUS (v.8.4) thunderbird-91.8.0-1.el8_4
Show 2 more Red Hat advisories
  • RHSA-2022:1301 Released 2022-04-11 · Red Hat rating Important
    thunderbird security update
    • Red Hat Enterprise Linux AppStream (v. 8) thunderbird-91.8.0-1.el8_5
  • RHSA-2022:1303 Released 2022-04-11 · Red Hat rating Important
    thunderbird security update
    • Red Hat Enterprise Linux AppStream E4S (v. 8.1) thunderbird-91.8.0-1.el8_1

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    Mozilla Thunderbird 91.8

    8 records Highest priority Priority MEDIUM 5 MEDIUM, 3 LOW

    Other records, highest priority first

    • TI-2022-11069 Out-of-bounds read in Mozilla ThunderbirdPriority MEDIUM 62
    • TI-2022-00992 Use after free in Mozilla ThunderbirdPriority MEDIUM 62
    • TI-2022-11070 Clickjacking in Mozilla ThunderbirdPriority MEDIUM 58
    Show all 8 records →

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux 6AffectedNo fix planned: Out of support scope
Red Hat Enterprise Linux AppStream (v. 8)Fixed RHSA-2022:1301
Red Hat Enterprise Linux AppStream E4S (v. 8.1)Fixed RHSA-2022:1303
Red Hat Enterprise Linux AppStream EUS (v. 8.2)Fixed RHSA-2022:1326
Red Hat Enterprise Linux AppStream EUS (v.8.4)Fixed RHSA-2022:1305
Red Hat Enterprise Linux Client (v. 7)Fixed RHSA-2022:1302
Red Hat Enterprise Linux Server Optional (v. 7)Fixed RHSA-2022:1302
Red Hat Enterprise Linux Workstation (v. 7)Fixed RHSA-2022:1302
Not affected: 1 product
  • Red Hat Enterprise Linux 9

Timeline

  1. 2026-10-02 Threatist record created from CVE-2022-1197
  2. 2026-10-03 Alias added: GHSA-h922-mv7w-mhm4

References

Advisory 2

  • TI-2024-08981 Use after free in Mozilla Firefox KEVCVSS 3.1CRITICAL 9.8
  • TI-2022-09832 Use after free in Mozilla Firefox KEVCVSS 3.1CRITICAL 9.6
  • TI-2019-08769 Improper input validation in Mozilla Firefox ESR KEVCVSS 3.1CRITICAL 10.0
  • TI-2010-03577 Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before… KEVCVSS 3.1CRITICAL 9.8
  • TI-2023-04799 Out-of-bounds write in Google Chrome KEVCVSS 3.1HIGH 8.8
  • TI-2023-04477 Out-of-bounds write in Google Chrome KEVCVSS 3.1HIGH 8.8
See all 2067 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences