The version of Thunderbird installed on the remote Windows host is prior to 141.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-61 advisory.

  - Memory safety bugs present in Firefox 140 and Thunderbird 140. Some of these bugs showed evidence of     memory corruption and we presume that with enough effort some of these could have been exploited to run     arbitrary code. (CVE-2025-8044)

  - On 64-bit platforms IonMonkey-JIT only wrote 32 bits of the 64-bit return value space on the stack.
    Baseline-JIT, however, read the entire 64 bits. (CVE-2025-8027)

  - On arm64, a WASM <code>brtable</code> instruction with a lot of entries could lead to the label being too     far from the instruction causing truncation and incorrect computation of the branch address.
    (CVE-2025-8028)

  - Thunderbird executed <code>javascript:</code> URLs when used in <code>object</code> and <code>embed</code>     tags. (CVE-2025-8029)

  - Thunderbird cached CORS preflight responses across IP address changes. This allowed circumventing CORS     with DNS rebinding. (CVE-2025-8036)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 5d91def0-685e-11f0-a12d-b42e991fc52e advisory.

    security@mozilla.org reports:
    Thunderbird ignored paths when checking the validity of               navigations in a frame.

Tenable has extracted the preceding description block directly from the FreeBSD security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Thunderbird installed on the remote Windows host is prior to 140.1. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-63 advisory.

  - Memory safety bugs present in Firefox ESR 140.0, Thunderbird ESR 140.0, Firefox 140 and Thunderbird 140.
    Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of     these could have been exploited to run arbitrary code. (CVE-2025-8040)

  - Thunderbird ignored paths when checking the validity of navigations in a frame. (CVE-2025-8038)

  - On 64-bit platforms IonMonkey-JIT only wrote 32 bits of the 64-bit return value space on the stack.
    Baseline-JIT, however, read the entire 64 bits. (CVE-2025-8027)

  - On arm64, a WASM <code>brtable</code> instruction with a lot of entries could lead to the label being too     far from the instruction causing truncation and incorrect computation of the branch address.
    (CVE-2025-8028)

  - Thunderbird executed <code>javascript:</code> URLs when used in <code>object</code> and <code>embed</code>     tags. (CVE-2025-8029)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 140.1. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-63 advisory.

  - Memory safety bugs present in Firefox ESR 140.0, Thunderbird ESR 140.0, Firefox 140 and Thunderbird 140.
    Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of     these could have been exploited to run arbitrary code. (CVE-2025-8040)

  - Thunderbird ignored paths when checking the validity of navigations in a frame. (CVE-2025-8038)

  - On 64-bit platforms IonMonkey-JIT only wrote 32 bits of the 64-bit return value space on the stack.
    Baseline-JIT, however, read the entire 64 bits. (CVE-2025-8027)

  - On arm64, a WASM <code>brtable</code> instruction with a lot of entries could lead to the label being too     far from the instruction causing truncation and incorrect computation of the branch address.
    (CVE-2025-8028)

  - Thunderbird executed <code>javascript:</code> URLs when used in <code>object</code> and <code>embed</code>     tags. (CVE-2025-8029)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 140.1. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-59 advisory.

  - Memory safety bugs present in Firefox ESR 140.0, Thunderbird ESR 140.0, Firefox 140 and Thunderbird 140.
    Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of     these could have been exploited to run arbitrary code. (CVE-2025-8040)

  - Firefox ignored paths when checking the validity of navigations in a frame. (CVE-2025-8038)

  - On 64-bit platforms IonMonkey-JIT only wrote 32 bits of the 64-bit return value space on the stack.
    Baseline-JIT, however, read the entire 64 bits. (CVE-2025-8027)

  - On arm64, a WASM <code>brtable</code> instruction with a lot of entries could lead to the label being too     far from the instruction causing truncation and incorrect computation of the branch address.
    (CVE-2025-8028)

  - Firefox executed <code>javascript:</code> URLs when used in <code>object</code> and <code>embed</code>     tags. (CVE-2025-8029)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-2fac68f810 advisory.

    - Updated to latest upstream (141.0)

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名稱	產品	系列	已發布	已更新	嚴重性
242578	Mozilla Thunderbird < 141.0	Nessus	Windows	2025/7/22	2025/7/30	critical
242921	FreeBSD : Mozilla -- Ignored paths while checking navigations (5d91def0-685e-11f0-a12d-b42e991fc52e)	Nessus	FreeBSD Local Security Checks	2025/7/28	2025/7/28	critical
242569	Mozilla Thunderbird < 140.1	Nessus	Windows	2025/7/22	2025/7/30	critical
242570	Mozilla Thunderbird < 140.1	Nessus	MacOS X Local Security Checks	2025/7/22	2025/7/30	critical
242558	Mozilla Firefox ESR < 140.1	Nessus	MacOS X Local Security Checks	2025/7/22	2025/7/30	critical
242665	Fedora 41 : firefox (2025-2fac68f810)	Nessus	Fedora Local Security Checks	2025/7/24	2025/8/2	critical

偵測

搜尋 Plugin

critical

critical

critical

critical

critical

critical