CVE-2021-43528

—

CVSS 3.1

6.5 medium

EPSS

1%p68

Published

Dec 8, 2021 (Dec 8, 2021)

Modified

Jun 17, 2026

Description

Thunderbird unexpectedly enabled JavaScript in the composition area. The JavaScript execution context was limited to this area and did not receive chrome-level privileges, but could be used as a stepping stone to further an attack with other vulnerabilities. This vulnerability affects Thunderbird < 91.4.0.

Vendors: mozilla debian
Products: thunderbird, debian linux
Weakness: CWE-269
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (1.3%)

In the news0 stories

No ingested article mentions this CVE yet.