Live › vulnerability › CVE-2026-118175
Go to dashboardWhen a user replies to, forwards, or edits a crafted email as new, Thunderbird can embed parts of a different message stored in the same folder into the draft without showing a blocked-content warning. If the user sends that draft, the content of the other message is disclosed to the recipients.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 19:33 UTC. All times on this page are UTC.
Anyone running Thunderbird versions before 159 or 153.6 who replies to, forwards, or edits untrusted email. The sources do not say which configurations are required beyond this, so the exact trigger conditions are unknown. Users on patched releases can skip it.
No product ranges from the sources yet.
thunderbird --version where available.159 or 153.6.159 or to 153.6 or later on the 153 line.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
When replying to, forwarding, or editing a crafted email message as new, Thunderbird could embed parts of a different message stored in the same folder into the message being composed, without showing a blocked content warning. If the user sent the message, the content of the other message was disclosed to the recipients. This vulnerability was fixed in Thunderbird 159 and Thunderbird 153.6.
This page as .md · .json · in your agent: get_signal("CVE-2026-118175")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.