A vulnerability allowing remote code execution has been discovered in Mozilla Thunderbird, specifically affecting versions prior to 115.16.0, 128

 Une vulnérabilité de code à distance dans Mozilla Thunderbird est activement exploitée (CVE-2024-9680)

3.1, and 131.0.1. The CVE-2024-9680 vulnerability is actively being exploited, as indicated by Mozilla. Users are advised to refer to the security bulletin to obtain the necessary patches. For more details, the security bulletin mfsa2024-52 from October 10, 2024, provides additional information on the vulnerability and solutions. This alert was issued by CERT-FR and contains vital information for users to secure their systems against potential threats.
https://www.cert.ssi.gouv.fr/avis/CERTFR-2024-AVI-0869/