PT-2026-54448
CVE-2026-57963
·
Published
2026-07-01
·
Updated
2026-08-04
Description by
CVSS 3.1
6.5
MediumMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Thunderbird versions prior to 140.12.1
Thunderbird versions prior to 152.0.1
Description
An attacker can inject arbitrary styled content, phishing links, and CSS to manipulate the chat UI by sending HTML chat messages via Matrix or XMPP.
Recommendations
Update to version 140.12.1.
Update to version 152.0.1.
Found an issue in the description? Have something to add? Feel free to write us 👾