CVE-2025-3877: thunderbird
CVSS: 5.4v3.1MediumRejected
AliasesUBUNTU-CVE-2025-3877
Published 14-05-2025Last modified 11-06-2025
Rejected
This record was rejected and should not be used. The data below is kept for reference.Vulnerability summary
CVE-2025-3877 is a medium (CVSS 5.4) vulnerability in thunderbird.
CVSS score
5.4/10
010
Medium · v3.1 (OSV · Ubuntu), selected by version preferenceEPSS score
Not scored
0%100%
No EPSS score yetKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 14 · Related 3Timeline
- 14-05-2025PublishedVulnerability first disclosed.
- 11-06-2025Last modifiedVulnerability information updated.
Description
Rejected reason: This CVE was marked as fixed, but due to other code landing - was not actually fixed. It was subsequently fixed in CVE-2025-5986.
CVSS metrics
1 score · 1 source · 1 versionMedium 5.4Preferred score · OSV · Ubuntu (Ecosystem advisory) · calculated from vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:LSourcesSingle source
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Debian1 product
- thunderbird< 1:128.10.1esr-1~deb11u1 | < 1:128.10.1esr-1~deb12u1 | < 1:128.10.1esr-1
Ubuntu1 product
- thunderbirdAll versions (No fix recorded)
2 vendors · 2 products
