CVE-2025-3875

概要

参考情報

• bugzilla.mozilla.org/show_bug.cgi · Permissions Required
• mozilla.org/security/advisories/mfsa2025-34 · Vendor Advisory
• mozilla.org/security/advisories/mfsa2025-35 · Vendor Advisory
• lists.debian.org/debian-lts-announce/2025/05/msg00022.html

thunderbird のその他の脆弱性

• CVE-2026-103500中 6.1An attacker could cause a heap buffer overflow by getting a user to open an email that is greater than or equal to 2GB in size. This vulnera…
• CVE-2026-96869中 4.3Information disclosure in the Networking component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, …
• CVE-2026-100832高 8.8Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 140.17, Thunderbird 153.4…
• CVE-2026-100831高 8.8Use-after-free in the DOM: UI Events & Focus Handling component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunder…
• CVE-2026-100830高 8.1Mitigation bypass in the DOM: Navigation component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, a…