CVE-2021-38496

Name of the Vulnerable Software and Affected Versions Thunderbird versions prior to 91.2 Thunderbird versions prior to 78.15 Firefox ESR versions prior to 91.2 Firefox ESR versions prior to 78.15 Firefox versions prior to 93

Description The issue is related to operations on MessageTasks, where a task may be removed while still scheduled, leading to memory corruption and a potentially exploitable crash. This is also associated with a memory release error. Exploitation of this issue could allow a remote attacker to execute arbitrary code in the system.

Recommendations For Thunderbird versions prior to 91.2, update to version 91.2 or later. For Thunderbird versions prior to 78.15, update to version 78.15 or later. For Firefox ESR versions prior to 91.2, update to version 91.2 or later. For Firefox ESR versions prior to 78.15, update to version 78.15 or later. For Firefox versions prior to 93, update to version 93 or later.