Threats Tagged 'cve-2025-3522'

Multiple security vulnerabilities have been identified and addressed in Mozilla Thunderbird as packaged for Red Hat Enterprise Linux 10. These include issues such as UI misrepresentation of attachment URLs, information disclosure of the /tmp directory listing, leakage of hashed Windows credentials via crafted attachment URLs, privilege escalation in the Firefox Updater component, unsafe attribute access during XPath parsing, process isolation bypass using javascript: URI links in cross-origin frames, and several memory safety bugs. Red Hat has issued an important security advisory with updates to fix these vulnerabilities in Thunderbird version 128.10.0 for various architectures.

Multiple security vulnerabilities have been identified in Mozilla Thunderbird as packaged for Red Hat Enterprise Linux 9. These include a user interface misrepresentation of attachment URLs, information disclosure of the /tmp directory listing, and leakage of hashed Windows credentials via crafted attachment URLs. Red Hat has issued an important security advisory with updates to address these issues in Thunderbird. The vulnerabilities affect various architectures and extended update support versions of Red Hat Enterprise Linux 9. Users are advised to apply the provided security updates to mitigate these vulnerabilities.

Multiple security vulnerabilities have been identified in Mozilla Thunderbird as packaged by Red Hat for Red Hat Enterprise Linux 8.6. These include a user interface misrepresentation of attachment URLs (CVE-2025-3523), information disclosure of the /tmp directory listing (CVE-2025-2830), and leakage of hashed Windows credentials via crafted attachment URLs (CVE-2025-3522). Red Hat has released an important security update addressing these issues in Thunderbird version 128.9.2-1.el8_6. The update is available for various Red Hat Enterprise Linux 8.6 variants including Extended Update Support, Advanced Mission Critical Update Support, Update Services for SAP Solutions, and Telecommunications Update Service. Users of affected Red Hat Enterprise Linux 8.6 systems should apply the update to remediate these vulnerabilities.

Multiple security vulnerabilities have been identified in Mozilla Thunderbird as packaged for Red Hat Enterprise Linux 8.4. These include a user interface misrepresentation of attachment URLs, information disclosure of the /tmp directory listing, and leakage of hashed Windows credentials via crafted attachment URLs. Red Hat has issued an important security update addressing these issues in Thunderbird version 128.9.2-1.el8_4. The update is available for various Red Hat Enterprise Linux 8.4 variants including Extended Update Support, Advanced Mission Critical Update Support, Update Services for SAP Solutions, and Telecommunications Update Service. Users of affected Red Hat Enterprise Linux 8.4 systems should apply this update to mitigate these vulnerabilities.

Multiple security vulnerabilities have been identified in Mozilla Thunderbird as packaged by Red Hat Enterprise Linux 8.8 Extended Update Support. These include a user interface misrepresentation of attachment URLs, information disclosure of the /tmp directory listing, and leakage of hashed Windows credentials via crafted attachment URLs. Red Hat has released security updates addressing these issues in Thunderbird version 128.9.2-1.el8_8. The vulnerabilities are rated as important by Red Hat Product Security.

Multiple security vulnerabilities have been identified in Mozilla Thunderbird as packaged for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions. These include a user interface misrepresentation of attachment URLs (CVE-2025-3523), information disclosure of the /tmp directory listing (CVE-2025-2830), and leakage of hashed Windows credentials via crafted attachment URLs (CVE-2025-3522). Red Hat has issued an important security update addressing these issues in Thunderbird version 128.9.2-1.el9_0 for multiple architectures. The update is available for Red Hat Enterprise Linux 9.0 on Power LE, x86_64, ARM 64, and IBM z Systems platforms. The vulnerabilities have a high severity rating but no CVSS score is provided. No known exploits in the wild have been reported at this time.

Multiple security vulnerabilities have been identified and addressed in Mozilla Thunderbird as packaged for Red Hat Enterprise Linux 9.4 Extended Update Support. These include a user interface misrepresentation of attachment URLs (CVE-2025-3523), information disclosure of the /tmp directory listing (CVE-2025-2830), and leakage of hashed Windows credentials via crafted attachment URLs (CVE-2025-3522). Red Hat has released updated Thunderbird packages to fix these issues.

Multiple security vulnerabilities have been identified in Mozilla Thunderbird as packaged for Red Hat Enterprise Linux 9.2 Extended Update Support. These include a user interface misrepresentation of attachment URLs (CVE-2025-3523), information disclosure of the /tmp directory listing (CVE-2025-2830), and leakage of hashed Windows credentials via crafted attachment URLs (CVE-2025-3522). Red Hat has issued an important security advisory with updated Thunderbird packages addressing these issues.

Multiple security vulnerabilities have been identified in Mozilla Thunderbird as packaged by Red Hat Enterprise Linux 8.2 AUS. These include a user interface misrepresentation of attachment URLs, information disclosure of the /tmp directory listing, and leakage of hashed Windows credentials via crafted attachment URLs. Red Hat has issued an important security advisory with updates addressing these issues. The vulnerabilities have been assigned CVE identifiers CVE-2025-3523, CVE-2025-2830, and CVE-2025-3522. A security update is available for affected Red Hat Enterprise Linux 8.2 AUS systems.

Multiple security vulnerabilities have been identified in Mozilla Thunderbird as packaged for Red Hat Enterprise Linux 9. These include a user interface misrepresentation of attachment URLs, information disclosure of the /tmp directory listing, and leakage of hashed Windows credentials via crafted attachment URLs. Red Hat has issued an important security update to address these issues in Thunderbird packages for various Red Hat Enterprise Linux 9 variants.