Critical · published October 14, 2025
🚨 A use-after-free memory bug in Thunderbird could send your application crashing down like a house of cards! 🔥 Think of it like a waiter dropping a tray full of drinks when a customer suddenly changes their order — a mishap that spills chaos everywhere! In this case, web extensions are the order changers, causing instability in a system that can't handle the sudden shift. If exploited, this vulnerability could lead to crashes, causing loss of data and disrupting your workflow. It's not just an annoyance; it could halt your productivity, making it a formidable threat to your daily operations.
Think of it like a waiter dropping a tray full of drinks when a customer suddenly changes their order — a mishap that spills chaos everywhere! In this case, web extensions are the order changers, causing instability in a system that can't handle the sudden shift. Starting in Thunderbird 143, the native messaging API used by web extensions on Windows has a use-after-free vulnerability, allowing attackers to corrupt memory and potentially crash the application.
If exploited, this vulnerability could lead to crashes, causing loss of data and disrupting your workflow. It's not just an annoyance; it could halt your productivity, making it a formidable threat to your daily operations. To protect yourself, make sure to update to Thunderbird 144 or later immediately. It's vital to keep all software up to date, so check for updates regularly and ensure extensions are compatible with the latest version. You've got this! By taking these steps, you can keep your environment safe and sound! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| mozilla/firefox | ≥ 143.0, < 144.0 | 144.0 |
| mozilla/thunderbird | ≥ 143.0, < 144.0 | 144.0 |