Note: This issue only affected Mac OS operating systems.

ftploc files, which can run commands on a user's computer. The executable file warning was not presented when downloading. ftploc files on Mac OS Reporter Dohyun Lee Impact moderate Description #CVE-2022-46875: Download Protections were bypassed by. #CVE-2022-46881: Memory corruption in WebGL Reporter Karl and an Anonymous ASAN Nightly User Impact high DescriptionĪn optimization in WebGL was incorrect in some cases, and could have led to memory corruption and a potentially exploitable crash. This bug only affects Thunderbird for Linux. #CVE-2022-46872: Arbitrary file read from a compromised content process Reporter Nika Layzell Impact high DescriptionĪn attacker who compromised a content process could have partially escaped the sandbox to read arbitrary files via clipboard-related IPC messages. Note: CVE-2022-46874 was originally included in these advisories for Thunderbird 102.6, but a patch (specific to Thunderbird) was omitted, resulting in it actually being fixed in Thunderbird 102.6.1 #CVE-2022-46880: Use-after-free in WebGL Reporter Atte Kettunen Impact high DescriptionĪ missing check related to tex units could have led to a use-after-free and potentially exploitable crash. In general, these flaws cannot be exploited through email in the Thunderbird product because scripting is disabled when reading mail, but are potentially risks in browser or browser-like contexts.

Mozilla Foundation Security Advisory 2022-53 Security Vulnerabilities fixed in Thunderbird 102.6 Announced DecemImpact high Products Thunderbird Fixed in

Download mozilla thunderbird 102.6.1