Severity
Medium
Analysis Summary
CVE-2022-2226
Mozilla Thunderbird could allow a remote attacker to bypass security restrictions. By performing a replay attack, a remote attacker could exploit this vulnerability to cause an email with a mismatching OpenPGP signature date to be accepted as valid.
Impact
- Security Bypass
Indicators Of Compromise
CVE
- CVE-2022-2226
Affected Vendors
- Mozilla
Affected Products
Mozilla Thunderbird 101 Mozilla
Thunderbird 91.10
Remediation
Refer to Mozilla Foundation Security Advisory for patch, upgrade or suggested workaround information.