Mozilla Thunderbird CSS-Based Exfiltration Vulnerability in Partially Encrypted Emails

A vulnerability exists in Mozilla Thunderbird versions prior to 147.0.1 and prior to 140.7.1, allowing for CSS-based exfiltration of content from partially encrypted emails when remote content is permitted. This issue could lead to unauthorized access to sensitive information within the emails.

Impact

Exploitation of this vulnerability could result in the unauthorized exfiltration of content from partially encrypted emails, potentially exposing sensitive information.

Remediation

Users can upgrade to Thunderbird version 147.0.1 or 140.7.1 to address this vulnerability.