Thunderbird 138.0.2 Dodges a Bullet: Critical Security Vulnerabilities Squashed!
Thunderbird 138.0.2 has swooped in like a superhero, fixing critical vulnerabilities that could have turned your email into a digital piñata. Thanks to scripting being disabled, your inbox remains a fortress, but steer clear of browser-like escapades for now!
Hot Take:
It looks like Thunderbird just got a crash course in security vulnerabilities. Who knew that promises could be so dangerous? Maybe it’s time for Thunderbird to make a new pledge to keep those promises in check, without flying out-of-bounds!
Key Points:
- Thunderbird 138.0.2 has fixed critical security vulnerabilities.
- The vulnerabilities are not typically exploitable through email.
- The issue centers around out-of-bounds access related to JavaScript Promise objects.
- Edouard Bochin and Tao Yan reported the issue via Trend Micro’s Zero Day Initiative.
- Reference Bug 1966612 is linked to the vulnerability.
Already a member? Log in here