Threats tagged 'ghsa-7h4p-h257-qp65'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	–	CVE-2026-118174When a message containing an OpenPGP key attachment was displayed, Thunderbird automatically loaded the attachment's High2026-10-27GCVE DatabaseCVE-2026-118174 A vulnerability in Thunderbird allowed automatic loading of attacker-controlled URLs via OpenPGP key attachments without user interaction, bypassing remote content blocking. On Windows, this could leak NTLM credentials to an attacker-controlled network share. The issue was fixed in Thunderbird 159 and 153.6. Report on CVE-2026-118174 Vulnerability #ghsa-7h4p-h257-qp65	GCVE Database	2026-10-27

Page 1 of 1