Red Hat Security Advisory: thunderbird security update
A security update for Mozilla Thunderbird addresses multiple vulnerabilities including unsolicited file download, disk space exhaustion, and credential leakage via mailbox:/// links. These issues were identified under CVE-2025-5986 and related CVEs. The update is provided by Red Hat for their Enterprise Linux 10 platform and associated architectures. The advisory rates the impact as Important (high severity).
AI Analysis
Technical Summary
Mozilla Thunderbird, a standalone mail and newsgroup client, has multiple security vulnerabilities including unsolicited file download, disk space exhaustion, and credential leakage via mailbox:/// links (CVE-2025-5986). Red Hat Product Security issued an advisory (RHSA-2025:10195) providing updates for Red Hat Enterprise Linux 10 and its extended support versions across multiple architectures. The vulnerabilities are collectively rated as Important in severity. The advisory references multiple CVEs (CVE-2025-5986, CVE-2025-6424, CVE-2025-6425, CVE-2025-6429, CVE-2025-6430) and provides updated Thunderbird packages to remediate these issues.
Potential Impact
The vulnerabilities could allow attackers to cause unsolicited file downloads, exhaust disk space, and leak credentials via specially crafted mailbox:/// links in Thunderbird. This could compromise user data confidentiality and system stability. The advisory rates the security impact as Important, indicating a high risk if unpatched.
Mitigation Recommendations
Red Hat has released updated Thunderbird packages for Red Hat Enterprise Linux 10 and its extended support versions to address these vulnerabilities. Users should apply the provided security update as detailed in the Red Hat advisory (RHSA-2025:10195) and the update instructions at https://access.redhat.com/articles/11258. No additional mitigation steps are indicated beyond applying the official update.
Red Hat Security Advisory: thunderbird security update
Description
A security update for Mozilla Thunderbird addresses multiple vulnerabilities including unsolicited file download, disk space exhaustion, and credential leakage via mailbox:/// links. These issues were identified under CVE-2025-5986 and related CVEs. The update is provided by Red Hat for their Enterprise Linux 10 platform and associated architectures. The advisory rates the impact as Important (high severity).
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
Mozilla Thunderbird, a standalone mail and newsgroup client, has multiple security vulnerabilities including unsolicited file download, disk space exhaustion, and credential leakage via mailbox:/// links (CVE-2025-5986). Red Hat Product Security issued an advisory (RHSA-2025:10195) providing updates for Red Hat Enterprise Linux 10 and its extended support versions across multiple architectures. The vulnerabilities are collectively rated as Important in severity. The advisory references multiple CVEs (CVE-2025-5986, CVE-2025-6424, CVE-2025-6425, CVE-2025-6429, CVE-2025-6430) and provides updated Thunderbird packages to remediate these issues.
Potential Impact
The vulnerabilities could allow attackers to cause unsolicited file downloads, exhaust disk space, and leak credentials via specially crafted mailbox:/// links in Thunderbird. This could compromise user data confidentiality and system stability. The advisory rates the security impact as Important, indicating a high risk if unpatched.
Mitigation Recommendations
Red Hat has released updated Thunderbird packages for Red Hat Enterprise Linux 10 and its extended support versions to address these vulnerabilities. Users should apply the provided security update as detailed in the Red Hat advisory (RHSA-2025:10195) and the update instructions at https://access.redhat.com/articles/11258. No additional mitigation steps are indicated beyond applying the official update.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2025:10195
- Cve Count
- 5
- Additional Cves
- ["CVE-2025-6424","CVE-2025-6425","CVE-2025-6429","CVE-2025-6430"]
Threat ID: 6a419cb927e9c79719abe71b
Added to database: 06/28/2026, 22:14:17 UTC
Last enriched: 06/28/2026, 22:34:44 UTC
Last updated: 09/10/2026, 19:36:51 UTC
Views: 43
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.