RHSA-2025:0281: thunderbird Red Hat

CVSS: 8.8v3.1HighPublished

Published 14-01-2025Last modified 14-04-2026

Open JSON

Vulnerability summary

RHSA-2025:0281 is a high (CVSS 8.8) vulnerability in thunderbird Red Hat.

Overall risk

35/100

0100

Medium · default modelHow is this calculated?

CVSS score

8.8/10

010

High · v3.1 (OSV · Red hat), selected by version preference

EPSS score

Not scored

0%100%

No EPSS score yet

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 7 · Downstream 0

CVE-2025-0237 CVE-2025-0238 CVE-2025-0239 CVE-2025-0240 CVE-2025-0241 CVE-2025-0242+1 more

Timeline

14-01-2025
PublishedVulnerability first disclosed.
14-04-2026
Last modifiedVulnerability information updated.

Description

Red Hat Security Advisory: thunderbird security update

CVSS metrics

1 score · 1 source · 1 version

v3.18.8

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Redhat3 products

thunderbird< 0:128.6.0-3.el8_10
thunderbird-debuginfo< 0:128.6.0-3.el8_10
thunderbird-debugsource< 0:128.6.0-3.el8_10

1 vendor · 3 products

References

41 links

Show all 41 references

www.mozilla.org/security/advisories/mfsa2025-01/ARTICLE
www.mozilla.org/security/advisories/mfsa2025-02/ARTICLE
access.redhat.com/security/cve/CVE-2025-0238REPORT
bugzilla.redhat.com/show_bug.cgi?id=2336165REPORT
www.cve.org/CVERecord?id=CVE-2025-0238Advisory
nvd.nist.gov/vuln/detail/CVE-2025-0238Advisory
bugzilla.mozilla.org/show_bug.cgi?id=1915535ARTICLE
www.mozilla.org/security/advisories/mfsa2025-03/ARTICLE
access.redhat.com/security/cve/CVE-2025-0239REPORT
bugzilla.redhat.com/show_bug.cgi?id=2336170REPORT
www.cve.org/CVERecord?id=CVE-2025-0239Advisory
nvd.nist.gov/vuln/detail/CVE-2025-0239Advisory
bugzilla.mozilla.org/show_bug.cgi?id=1929156ARTICLE
access.redhat.com/security/cve/CVE-2025-0240REPORT
bugzilla.redhat.com/show_bug.cgi?id=2336188REPORT
www.cve.org/CVERecord?id=CVE-2025-0240Advisory
nvd.nist.gov/vuln/detail/CVE-2025-0240Advisory
bugzilla.mozilla.org/show_bug.cgi?id=1929623ARTICLE
access.redhat.com/security/cve/CVE-2025-0241REPORT
bugzilla.redhat.com/show_bug.cgi?id=2336168REPORT
www.cve.org/CVERecord?id=CVE-2025-0241Advisory
nvd.nist.gov/vuln/detail/CVE-2025-0241Advisory
bugzilla.mozilla.org/show_bug.cgi?id=1933023ARTICLE
access.redhat.com/security/cve/CVE-2025-0242REPORT
www.cve.org/CVERecord?id=CVE-2025-0242Advisory
nvd.nist.gov/vuln/detail/CVE-2025-0242Advisory
bugzilla.mozilla.org/buglist.cgi?bug_id=1874523%2C1926454%2C1931873%2C1932169ARTICLE
access.redhat.com/security/cve/CVE-2025-0243REPORT
www.cve.org/CVERecord?id=CVE-2025-0243Advisory
nvd.nist.gov/vuln/detail/CVE-2025-0243Advisory
bugzilla.mozilla.org/buglist.cgi?bug_id=1827142%2C1932783ARTICLE