Vulnerability Database

314,343

Total vulnerabilities in the database

CVE-2025-26695

When requesting an OpenPGP key from a WKD server, an incorrect padding size was used and a network observer could have learned the length of the requested email address. This vulnerability affects Thunderbird < 136 and Thunderbird < 128.8.

  • Published: Mar 10, 2025
  • Updated: Nov 16, 2025
  • CVE: CVE-2025-26695
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 5.3
  • AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

No CWE or OWASP classifications available.

Software From Fixed in
mozilla / thunderbird - 128.8.0
mozilla / thunderbird 129.0 136.0