# CVE-2025-5986: Unsolicited File Download, Disk Space Exhaustion, and Credential Leakage via mailbox:/// Links

CVE-2025-5986 is fixed in 139 products on 2 platforms, first by Mozilla Thunderbird (af) 139.0.2, released June 10, 2025. It is not reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/cve/CVE-2025-5986
- Priority: High
- CVSS: 7.5 (Important)
- EPSS: 0.0061
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Jun 10, 2025
- Weakness: CWE-451: User Interface (UI) Misrepresentation of Critical Information
- Vendor advisory: https://nvd.nist.gov/vuln/detail/CVE-2025-5986

## Description

A crafted HTML email using mailbox:/// links can trigger automatic, unsolicited downloads of .pdf files to the user's desktop or home directory without prompting, even if auto-saving is disabled. This behavior can be abused to fill the disk with garbage data (e.g. using /dev/urandom on Linux) or to leak Windows credentials via SMB links when the email is viewed in HTML mode. While user interaction is required to download the .pdf file, visual obfuscation can conceal the download trigger. Viewing the email in HTML mode is enough to load external content. This vulnerability was fixed in Thunderbird 128.11.1 and Thunderbird 139.0.2.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Windows apps | Mozilla Thunderbird (af) | 139.0.2 | [Mozilla Thunderbird (af) 139.0.2](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.af-139.0.2.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird (ar) | 139.0.2 | [Mozilla Thunderbird (ar) 139.0.2](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.ar-139.0.2.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird (ast) | 139.0.2 | [Mozilla Thunderbird (ast) 139.0.2](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.ast-139.0.2.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird (be) | 139.0.2 | [Mozilla Thunderbird (be) 139.0.2](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.be-139.0.2.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird (bg) | 139.0.2 | [Mozilla Thunderbird (bg) 139.0.2](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.bg-139.0.2.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird (br) | 139.0.2 | [Mozilla Thunderbird (br) 139.0.2](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.br-139.0.2.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird (ca) | 139.0.2 | [Mozilla Thunderbird (ca) 139.0.2](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.ca-139.0.2.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird (cak) | 139.0.2 | [Mozilla Thunderbird (cak) 139.0.2](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.cak-139.0.2.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird (cs) | 139.0.2 | [Mozilla Thunderbird (cs) 139.0.2](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.cs-139.0.2.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird (cy) | 139.0.2 | [Mozilla Thunderbird (cy) 139.0.2](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.cy-139.0.2.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird (da) | 139.0.2 | [Mozilla Thunderbird (da) 139.0.2](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.da-139.0.2.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird (de) | 139.0.2 | [Mozilla Thunderbird (de) 139.0.2](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.de-139.0.2.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird (dsb) | 139.0.2 | [Mozilla Thunderbird (dsb) 139.0.2](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.dsb-139.0.2.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird (el) | 139.0.2 | [Mozilla Thunderbird (el) 139.0.2](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.el-139.0.2.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird (en-CA) | 139.0.2 | [Mozilla Thunderbird (en-CA) 139.0.2](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.en-ca-139.0.2.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird (en-GB) | 139.0.2 | [Mozilla Thunderbird (en-GB) 139.0.2](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.en-gb-139.0.2.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird (en-US) | 139.0.2 | [Mozilla Thunderbird (en-US) 139.0.2](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird-139.0.2.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird (es-AR) | 139.0.2 | [Mozilla Thunderbird (es-AR) 139.0.2](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.es-ar-139.0.2.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird (es-ES) | 139.0.2 | [Mozilla Thunderbird (es-ES) 139.0.2](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.es-es-139.0.2.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird (es-MX) | 139.0.2 | [Mozilla Thunderbird (es-MX) 139.0.2](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.es-mx-139.0.2.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird (et) | 139.0.2 | [Mozilla Thunderbird (et) 139.0.2](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.et-139.0.2.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird (eu) | 139.0.2 | [Mozilla Thunderbird (eu) 139.0.2](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.eu-139.0.2.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird (fi) | 139.0.2 | [Mozilla Thunderbird (fi) 139.0.2](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.fi-139.0.2.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird (fr) | 139.0.2 | [Mozilla Thunderbird (fr) 139.0.2](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.fr-139.0.2.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird (fy-NL) | 139.0.2 | [Mozilla Thunderbird (fy-NL) 139.0.2](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.fy-nl-139.0.2.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird (ga-IE) | 139.0.2 | [Mozilla Thunderbird (ga-IE) 139.0.2](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.ga-ie-139.0.2.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird (gd) | 139.0.2 | [Mozilla Thunderbird (gd) 139.0.2](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.gd-139.0.2.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird (gl) | 139.0.2 | [Mozilla Thunderbird (gl) 139.0.2](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.gl-139.0.2.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird (he) | 139.0.2 | [Mozilla Thunderbird (he) 139.0.2](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.he-139.0.2.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird (hr) | 139.0.2 | [Mozilla Thunderbird (hr) 139.0.2](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.hr-139.0.2.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird (hsb) | 139.0.2 | [Mozilla Thunderbird (hsb) 139.0.2](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.hsb-139.0.2.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird (hu) | 139.0.2 | [Mozilla Thunderbird (hu) 139.0.2](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.hu-139.0.2.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird (hy-AM) | 139.0.2 | [Mozilla Thunderbird (hy-AM) 139.0.2](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.hy-am-139.0.2.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird (id) | 139.0.2 | [Mozilla Thunderbird (id) 139.0.2](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.id-139.0.2.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird (is) | 139.0.2 | [Mozilla Thunderbird (is) 139.0.2](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.is-139.0.2.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird (it) | 139.0.2 | [Mozilla Thunderbird (it) 139.0.2](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.it-139.0.2.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird (ja) | 139.0.2 | [Mozilla Thunderbird (ja) 139.0.2](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.ja-139.0.2.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird (ka) | 139.0.2 | [Mozilla Thunderbird (ka) 139.0.2](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.ka-139.0.2.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird (kab) | 139.0.2 | [Mozilla Thunderbird (kab) 139.0.2](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.kab-139.0.2.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird (kk) | 139.0.2 | [Mozilla Thunderbird (kk) 139.0.2](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.kk-139.0.2.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird (ko) | 139.0.2 | [Mozilla Thunderbird (ko) 139.0.2](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.ko-139.0.2.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird (lt) | 139.0.2 | [Mozilla Thunderbird (lt) 139.0.2](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.lt-139.0.2.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird (lv) | 139.0.2 | [Mozilla Thunderbird (lv) 139.0.2](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.lv-139.0.2.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird (ms) | 139.0.2 | [Mozilla Thunderbird (ms) 139.0.2](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.ms-139.0.2.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird (nb-NO) | 139.0.2 | [Mozilla Thunderbird (nb-NO) 139.0.2](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.nb-no-139.0.2.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird (nl) | 139.0.2 | [Mozilla Thunderbird (nl) 139.0.2](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.nl-139.0.2.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird (nn-NO) | 139.0.2 | [Mozilla Thunderbird (nn-NO) 139.0.2](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.nn-no-139.0.2.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird (pa-IN) | 139.0.2 | [Mozilla Thunderbird (pa-IN) 139.0.2](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.pa-in-139.0.2.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird (pl) | 139.0.2 | [Mozilla Thunderbird (pl) 139.0.2](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.pl-139.0.2.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird (pt-BR) | 139.0.2 | [Mozilla Thunderbird (pt-BR) 139.0.2](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.pt-br-139.0.2.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird (pt-PT) | 139.0.2 | [Mozilla Thunderbird (pt-PT) 139.0.2](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.pt-pt-139.0.2.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird (rm) | 139.0.2 | [Mozilla Thunderbird (rm) 139.0.2](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.rm-139.0.2.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird (ro) | 139.0.2 | [Mozilla Thunderbird (ro) 139.0.2](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.ro-139.0.2.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird (ru) | 139.0.2 | [Mozilla Thunderbird (ru) 139.0.2](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.ru-139.0.2.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird (sk) | 139.0.2 | [Mozilla Thunderbird (sk) 139.0.2](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.sk-139.0.2.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird (sl) | 139.0.2 | [Mozilla Thunderbird (sl) 139.0.2](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.sl-139.0.2.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird (sq) | 139.0.2 | [Mozilla Thunderbird (sq) 139.0.2](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.sq-139.0.2.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird (sr) | 139.0.2 | [Mozilla Thunderbird (sr) 139.0.2](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.sr-139.0.2.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird (sv-SE) | 139.0.2 | [Mozilla Thunderbird (sv-SE) 139.0.2](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.sv-se-139.0.2.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird (th) | 139.0.2 | [Mozilla Thunderbird (th) 139.0.2](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.th-139.0.2.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird (tr) | 139.0.2 | [Mozilla Thunderbird (tr) 139.0.2](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.tr-139.0.2.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird (uk) | 139.0.2 | [Mozilla Thunderbird (uk) 139.0.2](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.uk-139.0.2.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird (uz) | 139.0.2 | [Mozilla Thunderbird (uz) 139.0.2](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.uz-139.0.2.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird (vi) | 139.0.2 | [Mozilla Thunderbird (vi) 139.0.2](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.vi-139.0.2.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird (zh-CN) | 139.0.2 | [Mozilla Thunderbird (zh-CN) 139.0.2](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.zh-cn-139.0.2.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird (zh-TW) | 139.0.2 | [Mozilla Thunderbird (zh-TW) 139.0.2](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.zh-tw-139.0.2.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird ESR (af) | 128.11.1 | [Mozilla Thunderbird ESR (af) 128.11.1](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.esr.af-128.11.1.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird ESR (ar) | 128.11.1 | [Mozilla Thunderbird ESR (ar) 128.11.1](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.esr.ar-128.11.1.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird ESR (ast) | 128.11.1 | [Mozilla Thunderbird ESR (ast) 128.11.1](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.esr.ast-128.11.1.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird ESR (be) | 128.11.1 | [Mozilla Thunderbird ESR (be) 128.11.1](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.esr.be-128.11.1.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird ESR (bg) | 128.11.1 | [Mozilla Thunderbird ESR (bg) 128.11.1](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.esr.bg-128.11.1.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird ESR (br) | 128.11.1 | [Mozilla Thunderbird ESR (br) 128.11.1](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.esr.br-128.11.1.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird ESR (ca) | 128.11.1 | [Mozilla Thunderbird ESR (ca) 128.11.1](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.esr.ca-128.11.1.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird ESR (cak) | 128.11.1 | [Mozilla Thunderbird ESR (cak) 128.11.1](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.esr.cak-128.11.1.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird ESR (cs) | 128.11.1 | [Mozilla Thunderbird ESR (cs) 128.11.1](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.esr.cs-128.11.1.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird ESR (cy) | 128.11.1 | [Mozilla Thunderbird ESR (cy) 128.11.1](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.esr.cy-128.11.1.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird ESR (da) | 128.11.1 | [Mozilla Thunderbird ESR (da) 128.11.1](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.esr.da-128.11.1.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird ESR (de) | 128.11.1 | [Mozilla Thunderbird ESR (de) 128.11.1](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.esr.de-128.11.1.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird ESR (dsb) | 128.11.1 | [Mozilla Thunderbird ESR (dsb) 128.11.1](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.esr.dsb-128.11.1.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird ESR (el) | 128.11.1 | [Mozilla Thunderbird ESR (el) 128.11.1](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.esr.el-128.11.1.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird ESR (en-CA) | 128.11.1 | [Mozilla Thunderbird ESR (en-CA) 128.11.1](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.esr.en-ca-128.11.1.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird ESR (en-GB) | 128.11.1 | [Mozilla Thunderbird ESR (en-GB) 128.11.1](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.esr.en-gb-128.11.1.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird ESR (en-US) | 128.11.1 | [Mozilla Thunderbird ESR (en-US) 128.11.1](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.esr-128.11.1.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird ESR (es-AR) | 128.11.1 | [Mozilla Thunderbird ESR (es-AR) 128.11.1](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.esr.es-ar-128.11.1.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird ESR (es-ES) | 128.11.1 | [Mozilla Thunderbird ESR (es-ES) 128.11.1](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.esr.es-es-128.11.1.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird ESR (es-MX) | 128.11.1 | [Mozilla Thunderbird ESR (es-MX) 128.11.1](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.esr.es-mx-128.11.1.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird ESR (et) | 128.11.1 | [Mozilla Thunderbird ESR (et) 128.11.1](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.esr.et-128.11.1.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird ESR (eu) | 128.11.1 | [Mozilla Thunderbird ESR (eu) 128.11.1](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.esr.eu-128.11.1.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird ESR (fi) | 128.11.1 | [Mozilla Thunderbird ESR (fi) 128.11.1](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.esr.fi-128.11.1.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird ESR (fr) | 128.11.1 | [Mozilla Thunderbird ESR (fr) 128.11.1](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.esr.fr-128.11.1.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird ESR (fy-NL) | 128.11.1 | [Mozilla Thunderbird ESR (fy-NL) 128.11.1](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.esr.fy-nl-128.11.1.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird ESR (ga-IE) | 128.11.1 | [Mozilla Thunderbird ESR (ga-IE) 128.11.1](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.esr.ga-ie-128.11.1.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird ESR (gd) | 128.11.1 | [Mozilla Thunderbird ESR (gd) 128.11.1](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.esr.gd-128.11.1.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird ESR (gl) | 128.11.1 | [Mozilla Thunderbird ESR (gl) 128.11.1](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.esr.gl-128.11.1.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird ESR (he) | 128.11.1 | [Mozilla Thunderbird ESR (he) 128.11.1](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.esr.he-128.11.1.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird ESR (hr) | 128.11.1 | [Mozilla Thunderbird ESR (hr) 128.11.1](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.esr.hr-128.11.1.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird ESR (hsb) | 128.11.1 | [Mozilla Thunderbird ESR (hsb) 128.11.1](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.esr.hsb-128.11.1.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird ESR (hu) | 128.11.1 | [Mozilla Thunderbird ESR (hu) 128.11.1](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.esr.hu-128.11.1.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird ESR (hy-AM) | 128.11.1 | [Mozilla Thunderbird ESR (hy-AM) 128.11.1](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.esr.hy-am-128.11.1.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird ESR (id) | 128.11.1 | [Mozilla Thunderbird ESR (id) 128.11.1](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.esr.id-128.11.1.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird ESR (is) | 128.11.1 | [Mozilla Thunderbird ESR (is) 128.11.1](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.esr.is-128.11.1.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird ESR (it) | 128.11.1 | [Mozilla Thunderbird ESR (it) 128.11.1](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.esr.it-128.11.1.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird ESR (ja) | 128.11.1 | [Mozilla Thunderbird ESR (ja) 128.11.1](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.esr.ja-128.11.1.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird ESR (ka) | 128.11.1 | [Mozilla Thunderbird ESR (ka) 128.11.1](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.esr.ka-128.11.1.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird ESR (kab) | 128.11.1 | [Mozilla Thunderbird ESR (kab) 128.11.1](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.esr.kab-128.11.1.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird ESR (kk) | 128.11.1 | [Mozilla Thunderbird ESR (kk) 128.11.1](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.esr.kk-128.11.1.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird ESR (ko) | 128.11.1 | [Mozilla Thunderbird ESR (ko) 128.11.1](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.esr.ko-128.11.1.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird ESR (lt) | 128.11.1 | [Mozilla Thunderbird ESR (lt) 128.11.1](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.esr.lt-128.11.1.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird ESR (lv) | 128.11.1 | [Mozilla Thunderbird ESR (lv) 128.11.1](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.esr.lv-128.11.1.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird ESR (ms) | 128.11.1 | [Mozilla Thunderbird ESR (ms) 128.11.1](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.esr.ms-128.11.1.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird ESR (nb-NO) | 128.11.1 | [Mozilla Thunderbird ESR (nb-NO) 128.11.1](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.esr.nb-no-128.11.1.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird ESR (nl) | 128.11.1 | [Mozilla Thunderbird ESR (nl) 128.11.1](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.esr.nl-128.11.1.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird ESR (nn-NO) | 128.11.1 | [Mozilla Thunderbird ESR (nn-NO) 128.11.1](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.esr.nn-no-128.11.1.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird ESR (pa-IN) | 128.11.1 | [Mozilla Thunderbird ESR (pa-IN) 128.11.1](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.esr.pa-in-128.11.1.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird ESR (pl) | 128.11.1 | [Mozilla Thunderbird ESR (pl) 128.11.1](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.esr.pl-128.11.1.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird ESR (pt-BR) | 128.11.1 | [Mozilla Thunderbird ESR (pt-BR) 128.11.1](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.esr.pt-br-128.11.1.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird ESR (pt-PT) | 128.11.1 | [Mozilla Thunderbird ESR (pt-PT) 128.11.1](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.esr.pt-pt-128.11.1.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird ESR (rm) | 128.11.1 | [Mozilla Thunderbird ESR (rm) 128.11.1](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.esr.rm-128.11.1.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird ESR (ro) | 128.11.1 | [Mozilla Thunderbird ESR (ro) 128.11.1](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.esr.ro-128.11.1.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird ESR (ru) | 128.11.1 | [Mozilla Thunderbird ESR (ru) 128.11.1](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.esr.ru-128.11.1.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird ESR (sk) | 128.11.1 | [Mozilla Thunderbird ESR (sk) 128.11.1](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.esr.sk-128.11.1.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird ESR (sl) | 128.11.1 | [Mozilla Thunderbird ESR (sl) 128.11.1](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.esr.sl-128.11.1.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird ESR (sq) | 128.11.1 | [Mozilla Thunderbird ESR (sq) 128.11.1](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.esr.sq-128.11.1.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird ESR (sr) | 128.11.1 | [Mozilla Thunderbird ESR (sr) 128.11.1](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.esr.sr-128.11.1.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird ESR (sv-SE) | 128.11.1 | [Mozilla Thunderbird ESR (sv-SE) 128.11.1](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.esr.sv-se-128.11.1.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird ESR (th) | 128.11.1 | [Mozilla Thunderbird ESR (th) 128.11.1](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.esr.th-128.11.1.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird ESR (tr) | 128.11.1 | [Mozilla Thunderbird ESR (tr) 128.11.1](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.esr.tr-128.11.1.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird ESR (uk) | 128.11.1 | [Mozilla Thunderbird ESR (uk) 128.11.1](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.esr.uk-128.11.1.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird ESR (uz) | 128.11.1 | [Mozilla Thunderbird ESR (uz) 128.11.1](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.esr.uz-128.11.1.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird ESR (vi) | 128.11.1 | [Mozilla Thunderbird ESR (vi) 128.11.1](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.esr.vi-128.11.1.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird ESR (zh-CN) | 128.11.1 | [Mozilla Thunderbird ESR (zh-CN) 128.11.1](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.esr.zh-cn-128.11.1.md) | Jun 10, 2025 |
| Windows apps | Mozilla Thunderbird ESR (zh-TW) | 128.11.1 | [Mozilla Thunderbird ESR (zh-TW) 128.11.1](https://patchblox.com/security/data/fix/windows-app/mozilla.thunderbird.esr.zh-tw-128.11.1.md) | Jun 10, 2025 |
| Linux | MozillaThunderbird opensuse-leap 15.6 | 128.11.1-150200.8.224.1 | [SUSE-SU-2025:02158-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02158-1.md) | Jun 27, 2025 |
| Linux | MozillaThunderbird sles 15.6 | 128.11.1-150200.8.224.1 | [SUSE-SU-2025:02158-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02158-1.md) | Jun 27, 2025 |
| Linux | MozillaThunderbird sles 15.7 | 128.11.1-150200.8.224.1 | [SUSE-SU-2025:02158-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02158-1.md) | Jun 27, 2025 |
| Linux | thunderbird Debian 11.6 (bullseye) | 1:128.12.0esr-1~deb11u1 | [DLA-4239-1](https://patchblox.com/security/data/fix/linux/dla-4239-1.md) | Jul 11, 2025 |
| Linux | thunderbird Debian 12.15 (bookworm) | 1:128.12.0esr-1~deb12u1 | [DSA-5959-1](https://patchblox.com/security/data/fix/linux/dsa-5959-1.md) | Jul 6, 2025 |
| Linux | thunderbird Debian 13.5 (trixie) | 1:128.12.0esr-1 | [DEBIAN-CVE-2025-5986](https://patchblox.com/security/data/fix/linux/debian-cve-2025-5986.md) | Jun 11, 2025 |
| Linux | thunderbird Debian 14 | 1:128.12.0esr-1 | [DEBIAN-CVE-2025-5986](https://patchblox.com/security/data/fix/linux/debian-cve-2025-5986.md) | Jun 11, 2025 |
| Linux | thunderbird RHEL 10 | 128.12.0-1.el10_0 | [RHSA-2025:10195](https://patchblox.com/security/data/fix/linux/rhsa-2025-10195.md) | Jun 24, 2025 |
| Linux | thunderbird RHEL 8 | 0:128.12.0-1.el8_10 | [RHSA-2025:10246](https://patchblox.com/security/data/fix/linux/rhsa-2025-10246.md) | Jul 2, 2025 |
| Linux | thunderbird RHEL 9 | 0:128.12.0-1.el9_6 | [RHSA-2025:10196](https://patchblox.com/security/data/fix/linux/rhsa-2025-10196.md) | Jul 2, 2025 |
| Linux | thunderbird Ubuntu 22.04.1 LTS (jammy) | 1:128.12.0+build1-0ubuntu0.22.04.1 | [thunderbird 1:128.12.0+build1-0ubuntu0.22.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-thunderbird-1-128.12.0-build1-0ubuntu0.22.04.1.md) | Jun 24, 2025 |
| Linux | thunderbird almalinux 10 | 128.12.0-1.el10_0.alma.1 | [ALSA-2025:10195](https://patchblox.com/security/data/fix/linux/alsa-2025-10195.md) | Jul 2, 2025 |
| Linux | thunderbird almalinux 8 | 128.12.0-1.el8_10.alma.1 | [ALSA-2025:10246](https://patchblox.com/security/data/fix/linux/alsa-2025-10246.md) | Jul 2, 2025 |
| Linux | thunderbird almalinux 9 | 128.12.0-1.el9_6.alma.1 | [ALSA-2025:10196](https://patchblox.com/security/data/fix/linux/alsa-2025-10196.md) | Jul 2, 2025 |
| Linux | thunderbird ol 10 | 0:128.12.0-1.0.1.el10_0 | [ELSA-2025-10195](https://patchblox.com/security/data/fix/linux/elsa-2025-10195.md) | Jul 2, 2025 |
| Linux | thunderbird ol 8 | 0:128.12.0-1.0.1.el8_10 | [ELSA-2025-10246](https://patchblox.com/security/data/fix/linux/elsa-2025-10246.md) | Jul 2, 2025 |
| Linux | thunderbird ol 9 | 0:128.12.0-1.0.1.el9_6 | [ELSA-2025-10196](https://patchblox.com/security/data/fix/linux/elsa-2025-10196.md) | Jul 2, 2025 |
| Linux | thunderbird rocky 10 | 0:128.12.0-1.el10_0 | [RLSA-2025:10195](https://patchblox.com/security/data/fix/linux/rlsa-2025-10195.md) | Oct 3, 2025 |
| Linux | thunderbird rocky 8 | 0:128.12.0-1.el8_10 | [RLSA-2025:10246](https://patchblox.com/security/data/fix/linux/rlsa-2025-10246.md) | Jul 29, 2025 |
| Linux | thunderbird rocky 9 | 0:128.12.0-1.el9_6 | [RLSA-2025:10196](https://patchblox.com/security/data/fix/linux/rlsa-2025-10196.md) | Oct 4, 2025 |
| Linux | thunderbird-gnome-support Ubuntu 22.04.1 LTS (jammy) | 1:128.12.0+build1-0ubuntu0.22.04.1 | [thunderbird-gnome-support 1:128.12.0+build1-0ubuntu0.22.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-thunderbird-gnome-support-1-128.12.0-build1-0ubuntu0.22.04.1.md) | Jun 24, 2025 |
| Linux | thunderbird-mozsymbols Ubuntu 22.04.1 LTS (jammy) | 1:128.12.0+build1-0ubuntu0.22.04.1 | [thunderbird-mozsymbols 1:128.12.0+build1-0ubuntu0.22.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-thunderbird-mozsymbols-1-128.12.0-build1-0ubuntu0.22.04.1.md) | Jun 24, 2025 |
| Linux | xul-ext-calendar-timezones Ubuntu 22.04.1 LTS (jammy) | 1:128.12.0+build1-0ubuntu0.22.04.1 | [xul-ext-calendar-timezones 1:128.12.0+build1-0ubuntu0.22.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-xul-ext-calendar-timezones-1-128.12.0-build1-0ubuntu0.22.04.1.md) | Jun 24, 2025 |
| Linux | xul-ext-gdata-provider Ubuntu 22.04.1 LTS (jammy) | 1:128.12.0+build1-0ubuntu0.22.04.1 | [xul-ext-gdata-provider 1:128.12.0+build1-0ubuntu0.22.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-xul-ext-gdata-provider-1-128.12.0-build1-0ubuntu0.22.04.1.md) | Jun 24, 2025 |
| Linux | xul-ext-lightning Ubuntu 22.04.1 LTS (jammy) | 1:128.12.0+build1-0ubuntu0.22.04.1 | [xul-ext-lightning 1:128.12.0+build1-0ubuntu0.22.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-xul-ext-lightning-1-128.12.0-build1-0ubuntu0.22.04.1.md) | Jun 24, 2025 |

---

Data as of 2026-11-08T00:53:09Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.