vulnerability

MFSA2025-23 Thunderbird: Security Vulnerabilities fixed in Thunderbird 137 (CVE-2025-3033)

Try Surface Command
Back to search
Severity
7
CVSS
(AV:L/AC:M/Au:N/C:C/I:C/A:C)
Published
2025-04-01
Added
2025-04-02
Modified
2025-04-03

Description

After selecting a malicious Windows `.url` shortcut from the local filesystem, an unexpected file could be uploaded.
*This bug only affects Firefox on Windows. Other operating systems are unaffected.* This vulnerability affects Firefox

Solution

mozilla-thunderbird-upgrade-137_0

References

Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today