CVE-2021-29957

Medium

Description

If a MIME encoded email contains an OpenPGP inline signed or encrypted message part, but also contains an additional unprotected part, Thunderbird did not indicate that only parts of the message are protected. This vulnerability affects Thunderbird < 78.10.2.

SeverityMedium
CVSS4.3
Exploit probability—
ProductMozilla Thunderbird
PublishedJun 24, 2021
First seenJun 24, 2021

How to fix

Update
  • mozilla thunderbird78.10.2 or later

Affected products

ProductAffected versionsFixed in
mozilla thunderbirdv < 78.10.278.10.2

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.