CVE-2025-3875

Thunderbird parses addresses in a way that can allow sender spoofing in case the server allows an invalid From address to be used. For example, if the From header contains an (invalid) value "Spoofed Name ", Thunderbird treats spoofed@example.com as the actual address. This vulnerability was fixed in Thunderbird 128.10.1 and Thunderbird 138.0.1.

• CWE-290

• https://bugzilla.mozilla.org/show_bug.cgi?id=1950629Permissions Required
• https://www.mozilla.org/security/advisories/mfsa2025-34/Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2025-35/Vendor Advisory
• https://lists.debian.org/debian-lts-announce/2025/05/msg00022.html

Published

May 14, 2025

Last Modified

Jun 17, 2026

Status

Modified

• Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-38741Dell Enterprise SONiC OS, version 4.5.0, contains a cryptogr…7.5
• CVE-2025-38742Dell iDRAC Service Module (iSM), versions prior to 6.0.3.0, …5.3
• CVE-2025-38743Dell iDRAC Service Module (iSM), versions prior to 6.0.3.0, …7.8
• CVE-2025-38745Dell OpenManage Enterprise, versions 3.10, 4.0, 4.1, and 4.2…6.5
• CVE-2025-38746Dell SupportAssist OS Recovery, versions prior to 5.5.14.0, …2.4
• CVE-2025-38747Dell SupportAssist OS Recovery, versions prior to 5.5.14.0, …7.8
• CVE-2025-3876The SMS Alert Order Notifications – WooCommerce plugin for W…8.8
• CVE-2025-3877Rejected reason: This CVE was marked as fixed, but due to ot…
• CVE-2025-3878The SMS Alert Order Notifications – WooCommerce plugin for W…5.4
• CVE-2025-3879Vault Community, Vault Enterprise (“Vault”) Azure Auth metho…8.8
• CVE-2025-3880The Poll, Survey & Quiz Maker Plugin by Opinion Stage plugin…4.3
• CVE-2025-3881eCharge Hardy Barth cPH2 check_req.php ntp Command Injection…8.8