CVE-2026-118175
UNKNOWN
NVD
CVSS Score
0
Severity
UNKNOWN
Published
Oct 27, 2026
Vendor
unknown
Description
When replying to, forwarding, or editing a crafted email message as new, Thunderbird could embed parts of a different message stored in the same folder into the message being composed, without showing a blocked content warning. If the user sent the message, the content of the other message was disclosed to the recipients. This vulnerability was fixed in Thunderbird 159 and Thunderbird 153.6.