{"id":"CVE-2023-0616","url":"https://www.cyber-defence.io/tools/cve/CVE-2023-0616","generatedAt":"2026-10-27T21:45:45.114Z","title":"An attacker could send a crafted message with this structure to attempt a DoS attack.","description":"If a MIME email combines OpenPGP and OpenPGP MIME data in a certain way Thunderbird repeatedly attempts to process and display the message, which could cause Thunderbird's user interface to lock up and no longer respond to the user's actions. An attacker could send a crafted message with this structure to attempt a DoS attack. This vulnerability affects Thunderbird < 102.8.","published":"2023-06-02T17:15:10.000Z","lastModified":"2026-10-24T13:10:00.000Z","status":"Modified","sourceIdentifier":"security@mozilla.org","cvss":{"version":"3.1","score":6.5,"severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"},"cwe":["CWE-400","CWE-770"],"affected":["mozilla/thunderbird"],"epss":{"score":0.0049,"percentile":0.4189,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.49%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1806507","tags":["Issue Tracking","Permissions Required","Vendor Advisory"],"source":"security@mozilla.org"},{"url":"https://www.mozilla.org/security/advisories/mfsa2023-07/","tags":["Vendor Advisory"],"source":"security@mozilla.org"},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1806507","tags":["Issue Tracking","Permissions Required","Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.mozilla.org/security/advisories/mfsa2023-07/","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2023-0616","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}