{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-118175", "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe", "state": "PUBLISHED", "assignerShortName": "mozilla", "dateReserved": "2026-10-27T18:16:29.111Z", "datePublished": "2026-10-27T18:16:29.537Z", "dateUpdated": "2026-10-27T18:27:47.611Z"}, "containers": {"cna": {"affected": [{"product": "Thunderbird", "vendor": "Mozilla", "versions": [{"status": "unaffected", "version": "153.6", "lessThanOrEqual": "153.*", "versionType": "rpm"}, {"status": "unaffected", "version": "159", "lessThanOrEqual": "*", "versionType": "rpm"}]}], "descriptions": [{"lang": "en", "value": "When replying to, forwarding, or editing a crafted email message as new, Thunderbird could embed parts of a different message stored in the same folder into the message being composed, without showing a blocked content warning. If the user sent the message, the content of the other message was disclosed to the recipients. This vulnerability was fixed in Thunderbird 159 and Thunderbird 153.6.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "When replying to, forwarding, or editing a crafted email message as new, Thunderbird could embed parts of a different message stored in the same folder into the message being composed, without showing a blocked content warning. If the user sent the message, the content of the other message was disclosed to the recipients. This vulnerability was fixed in Thunderbird 159 and Thunderbird 153.6."}]}], "title": "Content of other messages could be included when replying to a crafted message", "references": [{"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2081720"}, {"url": "https://www.mozilla.org/security/advisories/mfsa2026-121/"}, {"url": "https://www.mozilla.org/security/advisories/mfsa2026-122/"}], "credits": [{"lang": "en", "value": "YuYoung Sung"}], "providerMetadata": {"orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe", "shortName": "mozilla", "dateUpdated": "2026-10-27T18:27:47.611Z"}}}}

{}

{"affected": [{"affectedData": [{"product": "Thunderbird", "vendor": "Mozilla", "versions": [{"lessThanOrEqual": "153.*", "status": "unaffected", "version": "153.6", "versionType": "rpm"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "159", "versionType": "rpm"}]}], "source": "security@mozilla.org"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "When replying to, forwarding, or editing a crafted email message as new, Thunderbird could embed parts of a different message stored in the same folder into the message being composed, without showing a blocked content warning. If the user sent the message, the content of the other message was disclosed to the recipients. This vulnerability was fixed in Thunderbird 159 and Thunderbird 153.6."}], "id": "CVE-2026-118175", "lastModified": "2026-10-28T14:42:32.260", "metrics": {}, "published": "2026-10-27T19:17:29.150", "references": [{"source": "security@mozilla.org", "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2081720"}, {"source": "security@mozilla.org", "url": "https://www.mozilla.org/security/advisories/mfsa2026-121/"}, {"source": "security@mozilla.org", "url": "https://www.mozilla.org/security/advisories/mfsa2026-122/"}], "sourceIdentifier": "security@mozilla.org", "vulnStatus": "Deferred"}

{"bugzilla": {"description": "thunderbird: thunderbird: Information disclosure via crafted email message", "id": "2562323", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2562323"}, "csaw": false, "cvss3": {"cvss3_base_score": "4.3", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "status": "draft"}, "cwe": "CWE-201", "details": ["When replying to, forwarding, or editing a crafted email message as new, Thunderbird could embed parts of a different message stored in the same folder into the message being composed, without showing a blocked content warning. If the user sent the message, the content of the other message was disclosed to the recipients. This vulnerability was fixed in Thunderbird 159 and Thunderbird 153.6.", "A flaw was found in Thunderbird. When a user replies to, forwards, or edits a specially crafted email message, Thunderbird can improperly embed portions of a different message stored in the same folder into the draft without displaying a content warning. If the user sends the email, sensitive content from the unrelated message is disclosed to the recipients, leading to information disclosure."], "name": "CVE-2026-118175", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Fix deferred", "package_name": "thunderbird", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Fix deferred", "package_name": "thunderbird", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "thunderbird", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2026-10-27T18:16:29Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-118175\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-118175\nhttps://bugzilla.mozilla.org/show_bug.cgi?id=2081720\nhttps://www.mozilla.org/security/advisories/mfsa2026-121/\nhttps://www.mozilla.org/security/advisories/mfsa2026-122/"], "threat_severity": "Moderate"}

{"affected": [{"configurations": [{"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[153.6,154.0.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[159,*]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "Thunderbird", "source": "cna", "vendor": "Mozilla"}, "product": "thunderbird", "vendor": "mozilla"}], "created": "2026-10-27T20:30:08.564957+00:00", "updated": "2026-10-29T13:45:17.578446+00:00", "vendors": ["mozilla", "mozilla$PRODUCT$thunderbird"], "weaknesses": ["CWE-200", "CWE-201"]}