Mozilla · Thunderbird · CVE-2022-28286
**Name of the Vulnerable Software and Affected Versions**
Thunderbird versions prior to 91.8
Firefox versions prior to 99
Firefox ESR versions prior to 91.8
**Description**
The issue is related to a layout change that could cause iframe contents to be rendered outside of its border, potentially leading to user confusion or spoofing attacks. This could allow a remote attacker to disclose protected information or spoof page content.
**Recommendations**
For Thunderbird versions prior to 91.8, update to version 91.8 or later.
For Firefox versions prior to 99, update to version 99 or later.
For Firefox ESR versions prior to 91.8, update to version 91.8 or later.