https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T20:19:10.485901+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2018-12372 CVE-2018-12372 2026-10-09T20:19:10.489119+00:00

Affected: Mozilla Thunderbird

Decrypted S/MIME parts, when included in HTML crafted for an attack, can leak plaintext when included in a a HTML reply/forward. This vulnerability affects Thunderbird < 52.9.

 https://cve.radiocsirt.org/vuln/usn-3714-1 USN-3714-1 — thunderbird vulnerabilities 2026-10-09T20:19:10.489175+00:00

Affected: Ubuntu:14.04:LTS: thunderbird, Ubuntu:16.04:LTS: thunderbird, Ubuntu:18.04:LTS: thunderbird

Multiple security issues were discovered in Thunderbird. If a user were tricked in to opening a specially crafted website in a browsing context, an attacker could potentially exploit these to cause a denial of service, bypass CORS restrictions, obtain sensitive information, or execute arbitrary code. (CVE-2018-12359, CVE-2018-12360, CVE-2018-12362, CVE-2018-12363, CVE-2018-12364, CVE-2018-12365, CVE-2018-12366)

It was discovered that S/MIME and PGP decryption oracles can be built with HTML emails. An attacker could potentially exploit this to obtain sensitive information. (CVE-2018-12372)

It was discovered that S/MIME plaintext can be leaked through HTML reply/forward. An attacker could potentially exploit this to obtain sensitive information. (CVE-2018-12373)

It was discovered that forms can be used to exfiltrate encrypted mail parts by pressing enter in a form field. An attacker could potentially exploit this to obtain sensitive information. (CVE-2018-12374)