CVE Database
/

CVE-2022-3155

Back to search

CVE-2022-3155

Published: Dec 22, 2022

Modified: Apr 15, 2025

PUBLISHED

Description

When saving or opening an email attachment on macOS, Thunderbird did not set attribute com.apple.quarantine on the received file. If the received file was an application and the user attempted to open it, then the application was started immediately without asking the user to confirm. This vulnerability affects Thunderbird < 102.3.

VendorProductVersions

Mozilla

Thunderbird

affected
unspecified - < 102.3

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now