CVE-2021-43528

Thunderbird unexpectedly enabled JavaScript in the composition area

published December 8, 2021

CVSS
—
EPSS
1%
Percentile
70.4
In the wild
Unconfirmed
What it is

Thunderbird unexpectedly enabled JavaScript in the composition area. The JavaScript execution context was limited to this area and did not receive chrome-level privileges, but could be used as a stepping stone to further an attack with other vulnerabilities. This vulnerability affects Thunderbird < 91.4.0.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01309 · 70.4th percentile
Published
2021-12-08T21:21Z
EPSS history
Timeline
  • 08 DEC 21:21Z
    Thunderbird unexpectedly enabled JavaScript in the composition area
    cvelistv5