[UPDATE] Mozilla Firefox and Thunderbird: Multiple Vulnerabilities
A BSI Warn- und Informationsdienst (WID): Schwachstellen-Informationen (Security Advisories) ·
Admiralty grading (A–F · 1–6)
Source reliability
- A Completely reliable
- B Usually reliable
- C Fairly reliable
- D Not usually reliable
- E Unreliable
- F Cannot be judged
Information credibility
- 1 Confirmed
- 2 Probably true
- 3 Possibly true
- 4 Doubtful
- 5 Improbable
- 6 Cannot be judged
NATO Admiralty (AJP-2.1) grades confidence, independent of the risk score. Cross-source corroboration isn't tracked for non-CVE news, so single-source items are capped at a lower credibility number; a low number does not imply low quality.
Key insight
BSI vulnerability warning for Firefox/Thunderbird without specific CVE details; update advisory without active campaign or strategic dimension.
Description
Mozilla Firefox and Thunderbird are affected by multiple vulnerabilities that allow attackers to execute arbitrary code, bypass security measures, disclose confidential information, escalate privileges, perform sandbox escapes, and cause memory corruption. The BSI advisory signals critical to high severity without detailed CVE identification or exploitation status. Browsers and email clients are preferred attack vectors in enterprise environments.
Risk score
- cvss base
- 0.00
- kev bonus
- 0.00
- epss bonus
- 0.00
- poc bonus
- 0.00
- raw before weight
- 0.00
- industry weight
- 1.10
- freshness factor
- 1.00
- exploitability factor
- 1.00
- days old
- 2.00
- vendor mismatch penalty
- 0.00
Path: operational