Multiple security issues were discovered in Thunderbird. If a user were
tricked into opening a specially crafted website in a browsing context, an
attacker could potentially exploit these to cause a denial of service,
conduct spoofing attacks, or execute arbitrary code. (CVE-2022-1097,
CVE-2022-1196, CVE-2022-28281, CVE-2022-28282, CVE-2022-28285,
CVE-2022-28286, CVE-2022-28289)
It was discovered that Thunderbird ignored OpenPGP revocation when
importing a revoked key in some circumstances. An attacker could
potentially exploit this by tricking the user into trusting the
authenticity of a message or tricking them into use a revoked key to
send an encrypted message. (CVE-2022-1197)
ubuntu.com/security/CVE-2022-1097
ubuntu.com/security/CVE-2022-1196
ubuntu.com/security/CVE-2022-1197
ubuntu.com/security/CVE-2022-28281
ubuntu.com/security/CVE-2022-28282
ubuntu.com/security/CVE-2022-28285
ubuntu.com/security/CVE-2022-28286
ubuntu.com/security/CVE-2022-28289
ubuntu.com/security/notices/USN-5393-1