{
  "fix": "SUSE-SU-2025:02546-1",
  "url": "https://patchblox.com/security/fix/linux/suse-su-2025-02546-1",
  "summary": "SUSE-SU-2025:02546-1, released July 30, 2025, fixes 25 CVEs in MozillaThunderbird (version 140.1.0-150200.8.230.1). None of them is reported as exploited. Patch Radar priority: High.",
  "platform": "linux",
  "type": "advisory",
  "title": "MozillaThunderbird security update",
  "released": "2025-07-30T07:34:22Z",
  "priority": "High",
  "priorityTier": 3,
  "priorityReason": "Closes CVE-2025-6424, high severity",
  "supported": true,
  "cveCount": 25,
  "exploitedCveCount": 0,
  "kevCveCount": 0,
  "ransomwareCveCount": 0,
  "maxEpss": 0.079,
  "maxCvss": 9.8,
  "vendorAdvisory": "https://osv.dev/vulnerability/SUSE-SU-2025:02546-1",
  "appliesTo": [
    {
      "product": "MozillaThunderbird",
      "productUrl": "https://patchblox.com/security/product/linux/mozillathunderbird",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "140.1.0-150200.8.230.1",
      "supported": true
    },
    {
      "product": "MozillaThunderbird",
      "productUrl": "https://patchblox.com/security/product/linux/mozillathunderbird",
      "release": "sles 15.6",
      "fixedVersion": "140.1.0-150200.8.230.1",
      "supported": true
    },
    {
      "product": "MozillaThunderbird",
      "productUrl": "https://patchblox.com/security/product/linux/mozillathunderbird",
      "release": "sles 15.7",
      "fixedVersion": "140.1.0-150200.8.230.1",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2025-6424",
      "url": "https://patchblox.com/security/cve/CVE-2025-6424",
      "title": "Use-after-free in FontFaceSet",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.079,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-6436",
      "url": "https://patchblox.com/security/cve/CVE-2025-6436",
      "title": "Memory safety bugs fixed in Firefox 140 and Thunderbird 140",
      "priority": "High",
      "severity": "Medium",
      "cvss": 8.1,
      "epss": 0.04256,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-8028",
      "url": "https://patchblox.com/security/cve/CVE-2025-8028",
      "title": "Large branch table could lead to truncated instruction",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.0058,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-8031",
      "url": "https://patchblox.com/security/cve/CVE-2025-8031",
      "title": "Incorrect URL stripping in CSP reports",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.00511,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-8034",
      "url": "https://patchblox.com/security/cve/CVE-2025-8034",
      "title": "Memory safety bugs fixed in Firefox ESR 115.26, Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00461,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-6435",
      "url": "https://patchblox.com/security/cve/CVE-2025-6435",
      "title": "Save as in Devtools could download files without sanitizing the extension",
      "priority": "High",
      "severity": "Medium",
      "cvss": 8.1,
      "epss": 0.00457,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-8036",
      "url": "https://patchblox.com/security/cve/CVE-2025-8036",
      "title": "DNS rebinding circumvents CORS",
      "priority": "High",
      "severity": "Medium",
      "cvss": 8.1,
      "epss": 0.00446,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-8027",
      "url": "https://patchblox.com/security/cve/CVE-2025-8027",
      "title": "JavaScript engine only wrote partial return value to stack",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.5,
      "epss": 0.00432,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-8033",
      "url": "https://patchblox.com/security/cve/CVE-2025-8033",
      "title": "Incorrect JavaScript state machine for generators",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.5,
      "epss": 0.00432,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-8035",
      "url": "https://patchblox.com/security/cve/CVE-2025-8035",
      "title": "Memory safety bugs fixed in Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00401,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-8029",
      "url": "https://patchblox.com/security/cve/CVE-2025-8029",
      "title": "javascript: URLs executed on object and embed tags",
      "priority": "High",
      "severity": "Medium",
      "cvss": 8.1,
      "epss": 0.00376,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-8030",
      "url": "https://patchblox.com/security/cve/CVE-2025-8030",
      "title": "Potential user-assisted code execution in \u201CCopy as cURL\u201D command",
      "priority": "High",
      "severity": "Medium",
      "cvss": 8.1,
      "epss": 0.00376,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-8032",
      "url": "https://patchblox.com/security/cve/CVE-2025-8032",
      "title": "XSLT documents could bypass CSP",
      "priority": "High",
      "severity": "Medium",
      "cvss": 8.1,
      "epss": 0.00375,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-6427",
      "url": "https://patchblox.com/security/cve/CVE-2025-6427",
      "title": "connect-src Content Security Policy restriction could be bypassed",
      "priority": "High",
      "severity": "Medium",
      "cvss": 9.1,
      "epss": 0.00368,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-8040",
      "url": "https://patchblox.com/security/cve/CVE-2025-8040",
      "title": "Memory safety bugs fixed in Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141",
      "priority": "High",
      "severity": "Medium",
      "cvss": 8.8,
      "epss": 0.00368,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-6429",
      "url": "https://patchblox.com/security/cve/CVE-2025-6429",
      "title": "Incorrect parsing of URLs could have allowed embedding of youtube.com",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.5,
      "epss": 0.00352,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-6432",
      "url": "https://patchblox.com/security/cve/CVE-2025-6432",
      "title": "DNS Requests leaked outside of a configured SOCKS proxy",
      "priority": "High",
      "severity": "Medium",
      "cvss": 8.6,
      "epss": 0.0035,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-8039",
      "url": "https://patchblox.com/security/cve/CVE-2025-8039",
      "title": "Search terms persisted in URL bar",
      "priority": "High",
      "severity": "Medium",
      "cvss": 8.1,
      "epss": 0.0034,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-6425",
      "url": "https://patchblox.com/security/cve/CVE-2025-6425",
      "title": "The WebCompat WebExtension shipped with Firefox exposed a persistent UUID",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.5,
      "epss": 0.00307,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-6433",
      "url": "https://patchblox.com/security/cve/CVE-2025-6433",
      "title": "WebAuthn would allow a user to sign a challenge on a webpage with an invalid TLS certificate",
      "priority": "High",
      "severity": "Medium",
      "cvss": 9.8,
      "epss": 0.00297,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-8038",
      "url": "https://patchblox.com/security/cve/CVE-2025-8038",
      "title": "CSP frame-src was not correctly enforced for paths",
      "priority": "High",
      "severity": "Medium",
      "cvss": 9.8,
      "epss": 0.00267,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-8037",
      "url": "https://patchblox.com/security/cve/CVE-2025-8037",
      "title": "Nameless cookies shadow secure cookies",
      "priority": "High",
      "severity": "Medium",
      "cvss": 9.1,
      "epss": 0.00266,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-6430",
      "url": "https://patchblox.com/security/cve/CVE-2025-6430",
      "title": "Content-Disposition header ignored when a file is included in an embed or object tag",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.5,
      "epss": 0.00266,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-6434",
      "url": "https://patchblox.com/security/cve/CVE-2025-6434",
      "title": "HTTPS-Only exception screen lacked anti-clickjacking delay",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 4.3,
      "epss": 0.00283,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-6426",
      "url": "https://patchblox.com/security/cve/CVE-2025-6426",
      "title": "thunderbird: The executable file warning did not warn users before opening files with the \u0060terminal\u0060 extension",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.00205,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-10T13:56:55Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}