CVE-2025-0510

Name of the Vulnerable Software and Affected Versions Thunderbird versions prior to 128.7 Thunderbird versions prior to 135

Description The issue arises when the From field of an email uses invalid group name syntax. This results in Thunderbird displaying an incorrect sender address.

Recommendations For versions prior to 128.7, update to version 128.7 or later. For versions prior to 135, update to version 135 or later. At the moment, there is no information about additional mitigation measures for this issue.