🛡️ ALSA-2022:7190 — thunderbird (CVE-2022-39249 +7 more)

⚪ Unknown ✅ No Known Exploit OSV

N/A

CVSS Score

0 Low4 Medium7 High9 Critical10

Description

Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client.

This update upgrades Thunderbird to version 102.4.0.

Security Fix(es):

Mozilla: Matrix SDK bundled with Thunderbird vulnerable to an impersonation attack by malicious server administrators (CVE-2022-39249)
Mozilla: Matrix SDK bundled with Thunderbird vulnerable to a device verification attack (CVE-2022-39250)
Mozilla: Matrix SDK bundled with Thunderbird vulnerable to an impersonation attack (CVE-2022-39251)
Mozilla: Same-origin policy violation could have leaked cross-origin URLs (CVE-2022-42927)
Mozilla: Memory Corruption in JS Engine (CVE-2022-42928)
Mozilla: Matrix SDK bundled with Thunderbird vulnerable to a data corruption issue (CVE-2022-39236)
Mozilla: Denial of Service via window.print (CVE-2022-42929)
Mozilla: Memory safety bugs fixed in Firefox ESR 102.4 and Thunderbird 102.4 (CVE-2022-42932)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected software

ALSA-2022:7190 is recorded against 1 package.

thunderbird (fixed in 102.4.0-1.el8_6.alma)

Timeline and source

Published on 25 October 2022 and last revised on 4 February 2026. No public exploit is currently recorded for this entry. Record sourced from OSV.

References

Details

Severity Unknown

CVSS Score N/A

CVSS Vector N/A

CWE N/A

Public Exploit ✅ No

Source OSV

Published 2022-10-25

Updated 2026-08-20

Modified 2026-02-04

Fix URL N/A

Affected Packages

Software	From version	Fixed in
thunderbird	—	102.4.0-1.el8_6.alma

References

ADVISORY https://access.redhat.com/errata/RHSA-2022:7190

REPORT https://access.redhat.com/security/cve/CVE-2022-39236

REPORT https://access.redhat.com/security/cve/CVE-2022-39249

REPORT https://access.redhat.com/security/cve/CVE-2022-39250

REPORT https://access.redhat.com/security/cve/CVE-2022-39251

REPORT https://access.redhat.com/security/cve/CVE-2022-42927

REPORT https://access.redhat.com/security/cve/CVE-2022-42928

REPORT https://access.redhat.com/security/cve/CVE-2022-42929

REPORT https://access.redhat.com/security/cve/CVE-2022-42932

REPORT https://bugzilla.redhat.com/2135391

REPORT https://bugzilla.redhat.com/2135393

REPORT https://bugzilla.redhat.com/2135395

REPORT https://bugzilla.redhat.com/2135396

REPORT https://bugzilla.redhat.com/2136156

REPORT https://bugzilla.redhat.com/2136157

REPORT https://bugzilla.redhat.com/2136158

REPORT https://bugzilla.redhat.com/2136159

ADVISORY https://errata.almalinux.org/8/ALSA-2022-7190.html

🔗 NVD 🔗 Mitre

Similar Threats

Unknown ALSA-2022:8547
Unknown ALSA-2022:8561
Unknown ALSA-2022:7178
Unknown ALSA-2022:7190
Unknown ALSA-2022:7023

Free Vulnerability Check

Is your site affected by ALSA-2022:7190?

BotEraser helps you identify potentially vulnerable plugins and themes by checking your installation against ALSA-2022:7190 and other known CVE records.

Scan My Site Free →

No credit card required · Results in minutes

ⓘ Data Notice: The information presented above has been compiled from publicly available internet sources. Boteraser aggregates this data solely for informational purposes and does not independently classify, evaluate, or endorse any findings about the vulnerabilities listed. The accuracy and completeness of this information is the sole responsibility of the original publishers. Boteraser and its operators accept no liability for any decisions made based on this data.

🛡️ ALSA-2022:7190 — thunderbird (CVE-2022-39249 +7 more)

Description

Affected software

Timeline and source

References

Is your site affected by ALSA-2022:7190?

Browse related advisories

Company

Resources

Services

Trusted

Subscribe