https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-05T06:41:20.749542+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2025-1015 CVE-2025-1015 — Unsanitized address book fields 2026-10-05T06:41:21.297862+00:00

Affected: Mozilla Thunderbird

The Thunderbird Address Book URI fields contained unsanitized links. This could be used by an attacker to create and export an address book containing a malicious payload in a field. For example, in the “Other” field of the Instant Messaging section. If another user imported the address book, clicking on the link could result in opening a web page inside Thunderbird, and that page could execute (unprivileged) JavaScript. This vulnerability was fixed in Thunderbird 128.7 and Thunderbird 135.

 https://vulnerability.circl.lu/vuln/usn-7663-1 USN-7663-1 — thunderbird vulnerabilities 2026-10-05T06:41:21.298015+00:00

Affected: Ubuntu:22.04:LTS: thunderbird

Multiple security issues were discovered in Thunderbird. If a user were tricked into opening a specially crafted website in a browsing context, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information, bypass security restrictions, cross-site tracing, or execute arbitrary code.