The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:10246 advisory.

    * thunderbird: Unsolicited File Download, Disk Space Exhaustion, and Credential Leakage via mailbox:///     Links (CVE-2025-5986)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Firefox ESR installed on the remote Windows host is prior to 115.25. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-52 advisory.

  - A use-after-free in FontFaceSet resulted in a potentially exploitable crash. (CVE-2025-6424)

  - An attacker who enumerated resources from the WebCompat extension could have obtained a persistent UUID     that identified the browser, and persisted between containers and normal/private browsing mode, but not     profiles. (CVE-2025-6425)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 140.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-54 advisory.

  - If a user visited a webpage with an invalid TLS certificate, and granted an exception, the webpage was     able to provide a WebAuthn challenge that the user would be prompted to complete.  This is in violation of     the WebAuthN spec which requires a secure transport established without errors. (CVE-2025-6433)

  - A use-after-free in FontFaceSet resulted in a potentially exploitable crash. (CVE-2025-6424)

  - An attacker who enumerated resources from the WebCompat extension could have obtained a persistent UUID     that identified the browser, and persisted between containers and normal/private browsing mode, but not     profiles. (CVE-2025-6425)

  - The executable file warning did not warn users before opening files with the <code>terminal</code>     extension.  This bug only affects Thunderbird for macOS. Other versions of Thunderbird are unaffected.
    (CVE-2025-6426)

  - An attacker was able to bypass the <code>connect-src</code> directive of a Content Security Policy by     manipulating subdocuments. This would have also hidden the connections from the Network tab in Devtools.
    (CVE-2025-6427)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2025:10166 advisory.

    Mozilla Thunderbird is a standalone mail and newsgroup client.

    Security Fix(es):

    * thunderbird: Unsolicited File Download, Disk Space Exhaustion, and Credential Leakage via mailbox:///     Links (CVE-2025-5986)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2025:10165 advisory.

    Mozilla Thunderbird is a standalone mail and newsgroup client.

    Security Fix(es):

    * thunderbird: Unsolicited File Download, Disk Space Exhaustion, and Credential Leakage via mailbox:///     Links (CVE-2025-5986)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2025:10163 advisory.

    Mozilla Thunderbird is a standalone mail and newsgroup client.

    Security Fix(es):

    * thunderbird: Unsolicited File Download, Disk Space Exhaustion, and Credential Leakage via mailbox:///     Links (CVE-2025-5986)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2025:10074 advisory.

    * firefox: Content-Disposition header ignored when a file is included in an embed or object tag     (CVE-2025-6430)
      * firefox: Use-after-free in FontFaceSet (CVE-2025-6424)
      * firefox: Incorrect parsing of URLs could have allowed embedding of youtube.com (CVE-2025-6429)
      * firefox: The WebCompat WebExtension shipped with Firefox exposed a persistent UUID (CVE-2025-6425)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2025:10184 advisory.

    Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and     portability.

    Security Fix(es):

    * firefox: Content-Disposition header ignored when a file is included in an embed or object tag     (CVE-2025-6430)

    * firefox: Use-after-free in FontFaceSet (CVE-2025-6424)

    * firefox: Incorrect parsing of URLs could have allowed embedding of youtube.com (CVE-2025-6429)

    * firefox: The WebCompat WebExtension shipped with Firefox exposed a persistent UUID (CVE-2025-6425)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2025:10187 advisory.

    Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and     portability.

    Security Fix(es):

    * firefox: Content-Disposition header ignored when a file is included in an embed or object tag     (CVE-2025-6430)

    * firefox: Use-after-free in FontFaceSet (CVE-2025-6424)

    * firefox: Incorrect parsing of URLs could have allowed embedding of youtube.com (CVE-2025-6429)

    * firefox: The WebCompat WebExtension shipped with Firefox exposed a persistent UUID (CVE-2025-6425)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2025-10073 advisory.

    [128.12.0-1.0.1]
    - Fix firefox-oracle-default-prefs.js for new nss [Orabug: 37079789]

    [128.12.0]
    - Add debranding patches (Mustafa Gezen)
    - Add OpenELA default preferences (Louis Abel)

    [128.12.0-1]
    - Update to 128.12.0 build1

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5959 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-5959-1                   security@debian.org     https://www.debian.org/security/                       Moritz Muehlenhoff     July 06, 2025                         https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : thunderbird     CVE ID         : CVE-2025-5986 CVE-2025-6424 CVE-2025-6425 CVE-2025-6429                      CVE-2025-6430

    Multiple security issues were discovered in Thunderbird, which could     result in the execution of arbitrary code.

    For the stable distribution (bookworm), these problems have been fixed in     version 1:128.12.0esr-1~deb12u1.

    We recommend that you upgrade your thunderbird packages.

    For the detailed security status of thunderbird please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/thunderbird

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2025-10181 advisory.

    [128.12.0-1.0.1]
    - Update to 128.12.0 [Orabug: 38141310][CVE-2025-6424][CVE-2025-6425]       [CVE-2025-6429][CVE-2025-6430]

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:02368-1 advisory.

    Update to Mozilla Thunderbird 128.12 (MFSA 2025-55, bsc#1244670):

    - CVE-2025-6424: Use-after-free in FontFaceSet (bmo#1966423)
    - CVE-2025-6425: The WebCompat WebExtension shipped exposed a persistent UUID (bmo#1717672)
    - CVE-2025-6426: No warning when opening executable terminal files on macOS (bmo#1964385)
    - CVE-2025-6429: Incorrect parsing of URLs could have allowed embedding of youtube.com (bmo#1970658)
    - CVE-2025-6430: Content-Disposition header ignored when a file is included in an embed or object tag     (bmo#1971140)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:10073 advisory.

    * firefox: Content-Disposition header ignored when a file is included in an embed or object tag     (CVE-2025-6430)

    * firefox: Use-after-free in FontFaceSet (CVE-2025-6424)

    * firefox: Incorrect parsing of URLs could have allowed embedding of youtube.com (CVE-2025-6429)

    * firefox: The WebCompat WebExtension shipped with Firefox exposed a persistent UUID (CVE-2025-6425)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2025:10073 advisory.

    * firefox: Content-Disposition header ignored when a file is included in an embed or object tag     (CVE-2025-6430)
      * firefox: Use-after-free in FontFaceSet (CVE-2025-6424)
      * firefox: Incorrect parsing of URLs could have allowed embedding of youtube.com (CVE-2025-6429)
      * firefox: The WebCompat WebExtension shipped with Firefox exposed a persistent UUID (CVE-2025-6425)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
243112	RockyLinux 8 : thunderbird (RLSA-2025:10246)	Nessus	Rocky Linux Local Security Checks	7/30/2025	7/30/2025	critical
240338	Mozilla Firefox ESR < 115.25	Nessus	Windows	6/24/2025	8/12/2025	critical
241210	Mozilla Thunderbird < 140.0	Nessus	MacOS X Local Security Checks	7/2/2025	7/11/2025	critical
241119	RHEL 8 : thunderbird (RHSA-2025:10166)	Nessus	Red Hat Local Security Checks	7/1/2025	7/11/2025	critical
241141	RHEL 8 : thunderbird (RHSA-2025:10165)	Nessus	Red Hat Local Security Checks	7/2/2025	7/11/2025	critical
241149	RHEL 8 : thunderbird (RHSA-2025:10163)	Nessus	Red Hat Local Security Checks	7/2/2025	10/9/2025	critical
241169	AlmaLinux 8 : firefox (ALSA-2025:10074)	Nessus	Alma Linux Local Security Checks	7/2/2025	7/2/2025	critical
241177	RHEL 8 : firefox (RHSA-2025:10184)	Nessus	Red Hat Local Security Checks	7/2/2025	7/2/2025	critical
241183	RHEL 9 : firefox (RHSA-2025:10187)	Nessus	Red Hat Local Security Checks	7/2/2025	7/2/2025	critical
241205	Oracle Linux 10 : firefox (ELSA-2025-10073)	Nessus	Oracle Linux Local Security Checks	7/2/2025	7/2/2025	critical
241386	Debian dsa-5959 : thunderbird - security update	Nessus	Debian Local Security Checks	7/6/2025	7/11/2025	critical
242097	Oracle Linux 7 : firefox (ELSA-2025-10181)	Nessus	Oracle Linux Local Security Checks	7/15/2025	9/11/2025	critical
242370	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : MozillaThunderbird (SUSE-SU-2025:02368-1)	Nessus	SuSE Local Security Checks	7/19/2025	7/23/2025	critical
266647	RockyLinux 10 : firefox (RLSA-2025:10073)	Nessus	Rocky Linux Local Security Checks	10/6/2025	10/6/2025	critical
269869	AlmaLinux 10 : firefox (ALSA-2025:10073)	Nessus	Alma Linux Local Security Checks	10/9/2025	10/9/2025	critical

Detections

Analytics

Plugins Search

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical