{"schemaVersion":3,"id":"USN-5248-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"thunderbird vulnerabilities\n\nMultiple security issues were discovered in Thunderbird. If a user were\ntricked into opening a specially crafted website in a browsing context, an\nattacker could potentially exploit these to cause a denial of service,\nobtain sensitive information, trick a user into accepting unwanted\npermissions, conduct header splitting attacks, conduct spoofing attacks,\nbypass security restrictions, confuse the user, or execute arbitrary code.\n(CVE-2021-4129, CVE-2021-4140, CVE-2021-29981, CVE-2021-29982,\nCVE-2021-29987, CVE-2021-29991, CVE-2021-38495, CVE-2021-38496,\nCVE-2021-38497, CVE-2021-38498, CVE-2021-38500, CVE-2021-38501,\nCVE-2021-38503, CVE-2021-38504, CVE-2021-38506, CVE-2021-38507,\nCVE-2021-38508, CVE-2021-38509, CVE-2021-43534, CVE-2021-43535,\nCVE-2021-43536, CVE-2021-43537, CVE-2021-43538, CVE-2021-43539,\nCVE-2021-43541, CVE-2021-43542, CVE-2021-43543, CVE-2021-43545,\nCVE-2021-43656, CVE-2022-22737, CVE-2022-22738, CVE-2022-22739,\nCVE-2022-22740, CVE-2022-22741, CVE-2022-22742, CVE-2022-22743,\nCVE-2022-22745, CVE-2022-22747, CVE-2022-22748, CVE-2022-22751)\n\nIt was discovered that Thunderbird ignored the configuration to require\nSTARTTLS for an SMTP connection. A person-in-the-middle could potentially\nexploit this to perform a downgrade attack in order to intercept messages\nor take control of a session. (CVE-2021-38502)\n\nIt was discovered that JavaScript was unexpectedly enabled in the\ncomposition area. An attacker could potentially exploit this in\ncombination with another vulnerability, with unspecified impacts.\n(CVE-2021-43528)\n\nA buffer overflow was discovered in the Matrix chat library bundled with\nThunderbird. An attacker could potentially exploit this to cause a denial\nof service, or execute arbitrary code. (CVE-2021-44538)\n\nIt was discovered that Thunderbird's OpenPGP integration only considered\nthe inner signed message when checking signature validity in a message\nthat contains an additional outer MIME layer. An attacker could\npotentially exploit this to trick the user into thinking that a message\nhas a valid signature. (CVE-2021-4126)","dates":{"published":"2022-01-21T17:00:48.000Z","modified":"2026-04-27T15:48:44.123Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"ubuntu","product":"thunderbird","name":"thunderbird","label":"thunderbird","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/thunderbird","purlType":"deb","versions":[{"text":"< 1:91.5.0+build1-0ubuntu0.18.04.1","noFixRecorded":false,"fixedIn":null},{"text":"< 1:91.5.0+build1-0ubuntu0.20.04.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1:91.5.0+build1-0ubuntu0.18.04.1 | < 1:91.5.0+build1-0ubuntu0.20.04.1","eol":null,"hubHref":null}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://ubuntu.com/security/notices/USN-5248-1","label":"ubuntu.com/security/notices/USN-5248-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-4126","label":"ubuntu.com/security/CVE-2021-4126","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2021-4129","label":"ubuntu.com/security/CVE-2021-4129","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2021-4140","label":"ubuntu.com/security/CVE-2021-4140","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2021-29981","label":"ubuntu.com/security/CVE-2021-29981","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2021-29982","label":"ubuntu.com/security/CVE-2021-29982","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2021-29987","label":"ubuntu.com/security/CVE-2021-29987","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2021-29991","label":"ubuntu.com/security/CVE-2021-29991","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2021-38495","label":"ubuntu.com/security/CVE-2021-38495","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2021-38496","label":"ubuntu.com/security/CVE-2021-38496","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2021-38497","label":"ubuntu.com/security/CVE-2021-38497","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2021-38498","label":"ubuntu.com/security/CVE-2021-38498","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2021-38500","label":"ubuntu.com/security/CVE-2021-38500","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2021-38501","label":"ubuntu.com/security/CVE-2021-38501","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2021-38502","label":"ubuntu.com/security/CVE-2021-38502","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2021-38503","label":"ubuntu.com/security/CVE-2021-38503","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2021-38504","label":"ubuntu.com/security/CVE-2021-38504","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2021-38506","label":"ubuntu.com/security/CVE-2021-38506","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2021-38507","label":"ubuntu.com/security/CVE-2021-38507","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2021-38508","label":"ubuntu.com/security/CVE-2021-38508","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2021-38509","label":"ubuntu.com/security/CVE-2021-38509","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2021-43528","label":"ubuntu.com/security/CVE-2021-43528","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2021-43534","label":"ubuntu.com/security/CVE-2021-43534","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2021-43535","label":"ubuntu.com/security/CVE-2021-43535","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2021-43536","label":"ubuntu.com/security/CVE-2021-43536","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2021-43537","label":"ubuntu.com/security/CVE-2021-43537","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2021-43538","label":"ubuntu.com/security/CVE-2021-43538","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2021-43539","label":"ubuntu.com/security/CVE-2021-43539","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2021-43541","label":"ubuntu.com/security/CVE-2021-43541","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2021-43542","label":"ubuntu.com/security/CVE-2021-43542","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2021-43543","label":"ubuntu.com/security/CVE-2021-43543","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2021-43545","label":"ubuntu.com/security/CVE-2021-43545","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2021-43546","label":"ubuntu.com/security/CVE-2021-43546","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2021-44538","label":"ubuntu.com/security/CVE-2021-44538","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2022-22737","label":"ubuntu.com/security/CVE-2022-22737","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2022-22738","label":"ubuntu.com/security/CVE-2022-22738","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2022-22739","label":"ubuntu.com/security/CVE-2022-22739","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2022-22740","label":"ubuntu.com/security/CVE-2022-22740","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2022-22741","label":"ubuntu.com/security/CVE-2022-22741","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2022-22742","label":"ubuntu.com/security/CVE-2022-22742","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2022-22743","label":"ubuntu.com/security/CVE-2022-22743","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2022-22745","label":"ubuntu.com/security/CVE-2022-22745","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2022-22747","label":"ubuntu.com/security/CVE-2022-22747","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2022-22748","label":"ubuntu.com/security/CVE-2022-22748","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2022-22751","label":"ubuntu.com/security/CVE-2022-22751","hostname":"ubuntu.com","tags":["REPORT"]}],"lineage":{"upstream":["CVE-2021-29981","CVE-2021-29982","CVE-2021-29987","CVE-2021-29991","CVE-2021-38495","CVE-2021-38496","CVE-2021-38497","CVE-2021-38498","CVE-2021-38500","CVE-2021-38501","CVE-2021-38502","CVE-2021-38503","CVE-2021-38504","CVE-2021-38506","CVE-2021-38507","CVE-2021-38508","CVE-2021-38509","CVE-2021-4126","CVE-2021-4129","CVE-2021-4140","CVE-2021-43528","CVE-2021-43534","CVE-2021-43535","CVE-2021-43536","CVE-2021-43537","CVE-2021-43538","CVE-2021-43539","CVE-2021-43541","CVE-2021-43542","CVE-2021-43543","CVE-2021-43545","CVE-2021-43546","CVE-2021-44538","CVE-2022-22737","CVE-2022-22738","CVE-2022-22739","CVE-2022-22740","CVE-2022-22741","CVE-2022-22742","CVE-2022-22743","CVE-2022-22745","CVE-2022-22747","CVE-2022-22748","CVE-2022-22751"],"downstream":[],"duplicates":[],"related":["CVE-2021-29981","CVE-2021-29982","CVE-2021-29987","CVE-2021-29991","CVE-2021-38495","CVE-2021-38496","CVE-2021-38497","CVE-2021-38498","CVE-2021-38500","CVE-2021-38501","CVE-2021-38502","CVE-2021-38503","CVE-2021-38504","CVE-2021-38506","CVE-2021-38507","CVE-2021-38508","CVE-2021-38509","CVE-2021-4126","CVE-2021-4129","CVE-2021-4140","CVE-2021-43528","CVE-2021-43534","CVE-2021-43535","CVE-2021-43536","CVE-2021-43537","CVE-2021-43538","CVE-2021-43539","CVE-2021-43541","CVE-2021-43542","CVE-2021-43543","CVE-2021-43545","CVE-2021-43546","CVE-2021-44538","CVE-2022-22737","CVE-2022-22738","CVE-2022-22739","CVE-2022-22740","CVE-2022-22741","CVE-2022-22742","CVE-2022-22743","CVE-2022-22745","CVE-2022-22747","CVE-2022-22748","CVE-2022-22751"]},"timeline":[{"kind":"published","date":"2022-01-21T17:00:48.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-04-27T15:48:44.123Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T21:01:53.313Z","stale":false,"partial":false}}