CVE-2025-4085 | Mozilla Thunderbird up to 137.x UITour privilege escalation

April 29, 2025 Yanac

A vulnerability was found in Mozilla Thunderbird up to 137.x. It has been declared as critical. This vulnerability affects unknown code of the component UITour. The manipulation leads to privilege escalation.

This vulnerability was named CVE-2025-4085. The attack can only be done within the local network. There is no exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More