CVE-2023-50761

Summary

CVE-2023-50761 is a vulnerability in Thunderbird email client versions prior to 115.6. It allows an attacker to manipulate the signature creation date and time of a digitally signed S/MIME email message without Thunderbird verifying the consistency between the signature and message dates. Consequently, the email may be displayed with a valid signature despite a significant date or time discrepancy. This could potentially deceive recipients into believing that a message was sent at a different date than actual.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.