CVE-2023-0616

If a MIME email combines OpenPGP and OpenPGP MIME data in a certain way Thunderbird repeatedly attempts to process and display the message, which could cause Thunderbird's user interface to lock up and no longer respond to the user's actions. An attacker could send a crafted message with this structure to attempt a DoS attack. This vulnerability affects Thunderbird < 102.8.

• CWE-400
• CWE-770

• https://bugzilla.mozilla.org/show_bug.cgi?id=1806507Issue Tracking, Permissions Required, Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2023-07/Vendor Advisory
• https://bugzilla.mozilla.org/show_bug.cgi?id=1806507Issue Tracking, Permissions Required, Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2023-07/Vendor Advisory

Published

Jun 2, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-0610Improper Authorization in GitHub repository wallabag/wallaba…4.3
• CVE-2023-0611A vulnerability, which was classified as critical, has been …8.8
• CVE-2023-0612A vulnerability, which was classified as critical, was found…7.5
• CVE-2023-0613A vulnerability has been found in TRENDnet TEW-811DRU 1.0.10…7.5
• CVE-2023-0614The fix in 4.6.16, 4.7.9, 4.8.4 and 4.9.7 for CVE-2018-10919…6.5
• CVE-2023-0615A memory leak flaw and potential divide by zero and Integer …5.5
• CVE-2023-0617A vulnerability was found in TRENDNet TEW-811DRU 1.0.10.0. I…7.5
• CVE-2023-0618A vulnerability was found in TRENDnet TEW-652BRP 3.04B01. It…7.5
• CVE-2023-0619The Kraken.io Image Optimizer plugin for WordPress is vulner…6.5
• CVE-2023-0620HashiCorp Vault and Vault Enterprise versions 0.8.0 through …6.7
• CVE-2023-0621Cscape Envision RV version 4.60 is vulnerable to an out-of-b…7.8
• CVE-2023-0622Cscape Envision RV version 4.60 is vulnerable to an out-of-b…7.8