CVE-2022-0566: Mozilla Thunderbird

High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days.

It may be possible for an attacker to craft an email message that causes Thunderbird to perform an out-of-bounds write of one byte when processing the message. This vulnerability affects Thunderbird < 91.6.1.

Affected products

• Mozilla Thunderbird: before 91.6.1 (fixed in 91.6.1)

Published 2022-12-22. Last modified 2026-06-17.