Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2026-57963 →
DEBIAN-CVE-2026-57963
An attacker who can send HTML chat messages (via Matrix or XMPP) can inject arbitrary styled content, phishing links, and CSS that manipulates the cha...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
An attacker who can send HTML chat messages (via Matrix or XMPP) can inject arbitrary styled content, phishing links, and CSS that manipulates the chat UI. This vulnerability was fixed in Thunderbird 152.0.1 and Thunderbird 140.12.1.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Debian:12
thunderbird
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:140.13.0esr-2~deb12u1"}]}]
Debian:13
thunderbird
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:140.13.0esr-2~deb13u1"}]}]
Debian:14
thunderbird
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:140.13.0esr-1"}]}]
Références
- advisory security-tracker.debian.org