Vulnerability Database

314,373

Total vulnerabilities in the database

CVE-2023-50761

The signature of a digitally signed S/MIME email message may optionally specify the signature creation date and time. If present, Thunderbird did not compare the signature creation date with the message date and time, and displayed a valid signature despite a date or time mismatch. This could be used to give recipients the impression that a message was sent at a different date or time. This vulnerability affects Thunderbird < 115.6.

  • Published: Dec 19, 2023
  • Updated: Nov 16, 2025
  • CVE: CVE-2023-50761
  • Severity: Low
  • Exploit:

CVSS v3:

  • Severity: Low
  • Score: 4.3
  • AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

No CWE or OWASP classifications available.

Software From Fixed in
mozilla / thunderbird - 115.6
debian / debian_linux 11.0 11.0.x
debian / debian_linux 12.0 12.0.x