Known vulnerabilities in thunderbird (Ubuntu package) 1:60.6.1+build2-0ubuntu1

Version: 1:60.6.1+build2-0ubuntu1
Software CPE: cpe:2.3:o:canonical:thunderbird_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Total vulnerabilities: 23
Public exploits: 1
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting thunderbird (Ubuntu package) version 1:60.6.1+build2-0ubuntu1 thunderbird (Ubuntu package) 1:60.6.1+build2-0ubuntu1 is affected by 23 vulnerabilities: 1 critical, 13 high, 5 medium, 4 low Critical High Medium Low

Vulnerabilities (23)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU27572 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2020-12397
CWE-451 Low
No
No
1:68.8.0+build2-0ubuntu0.16.04.2, 1:68.8.0+build2-0ubuntu0.18.04.2, 1:68.8.0+build2-0ubuntu0.19.10.2, 1:68.8.0+build2-0ubuntu0.20.04.2 06.05.2020 SB2020050618
SB2020050901
SB2020051105
and 11 more
#VU27538 - Memory corruption
CVE-2020-12395
CWE-119 High
No
No
1:68.8.0+build2-0ubuntu0.16.04.2, 1:68.8.0+build2-0ubuntu0.18.04.2, 1:68.8.0+build2-0ubuntu0.19.10.2, 1:68.8.0+build2-0ubuntu0.20.04.2 05.05.2020 SB2020050511
SB2020050518
SB2020050606
and 29 more
#VU27535 - Improper input validation
CVE-2020-12392
CWE-20 Low
No
No
1:68.8.0+build2-0ubuntu0.16.04.2, 1:68.8.0+build2-0ubuntu0.18.04.2, 1:68.8.0+build2-0ubuntu0.19.10.2, 1:68.8.0+build2-0ubuntu0.20.04.2 05.05.2020 SB2020050511
SB2020050518
SB2020050606
and 29 more
#VU27532 - Memory corruption
CVE-2020-6831
CWE-119 High
No
No
1:68.8.0+build2-0ubuntu0.16.04.2, 1:68.8.0+build2-0ubuntu0.18.04.2, 1:68.8.0+build2-0ubuntu0.19.10.2, 1:68.8.0+build2-0ubuntu0.20.04.2 05.05.2020 SB2020050511
SB2020050517
SB2020050518
and 37 more
#VU27529 - Use After Free
CVE-2020-12387
CWE-416 High
No
No
1:68.8.0+build2-0ubuntu0.16.04.2, 1:68.8.0+build2-0ubuntu0.18.04.2, 1:68.8.0+build2-0ubuntu0.19.10.2, 1:68.8.0+build2-0ubuntu0.20.04.2 05.05.2020 SB2020050511
SB2020050518
SB2020050606
and 29 more
#VU24147 - Type confusion
CVE-2019-17026
CWE-843 Critical
Public exploit available
Exploited
1:68.4.1+build1-0ubuntu0.18.04.1, 1:68.4.1+build1-0ubuntu0.19.10.1, 1:68.7.0+build1-0ubuntu0.16.04.2 08.01.2020 SB2020010819
SB2020010919
SB2020010922
and 21 more
#VU24062 - Memory corruption
CVE-2019-17024
CWE-119 High
No
No
1:68.4.1+build1-0ubuntu0.18.04.1, 1:68.4.1+build1-0ubuntu0.19.10.1, 1:68.7.0+build1-0ubuntu0.16.04.2 07.01.2020 SB2020010708
SB2020010807
SB2020010712
and 21 more
#VU24060 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-17022
CWE-79 Medium
No
No
1:68.4.1+build1-0ubuntu0.18.04.1, 1:68.4.1+build1-0ubuntu0.19.10.1, 1:68.7.0+build1-0ubuntu0.16.04.2 07.01.2020 SB2020010708
SB2020010807
SB2020010712
and 21 more
#VU24055 - Type confusion
CVE-2019-17017
CWE-843 Medium
No
No
1:68.4.1+build1-0ubuntu0.18.04.1, 1:68.4.1+build1-0ubuntu0.19.10.1, 1:68.7.0+build1-0ubuntu0.16.04.2 07.01.2020 SB2020010708
SB2020010807
SB2020010712
and 20 more
#VU24054 - Improper Control of Generation of Code ('Code Injection')
CVE-2019-17016
CWE-94 Medium
No
No
1:68.4.1+build1-0ubuntu0.18.04.1, 1:68.4.1+build1-0ubuntu0.19.10.1, 1:68.7.0+build1-0ubuntu0.16.04.2 07.01.2020 SB2020010708
SB2020010807
SB2020010712
and 21 more
#VU23377 - Memory corruption
CVE-2019-17012
CWE-119 High
No
No
1:68.4.1+build1-0ubuntu0.18.04.1, 1:68.4.1+build1-0ubuntu0.19.10.1, 1:68.7.0+build1-0ubuntu0.16.04.2 03.12.2019 SB2019120312
SB2019120313
SB2019120314
and 20 more
#VU23376 - Use After Free
CVE-2019-17011
CWE-416 High
No
No
1:68.4.1+build1-0ubuntu0.18.04.1, 1:68.4.1+build1-0ubuntu0.19.10.1, 1:68.7.0+build1-0ubuntu0.16.04.2 03.12.2019 SB2019120312
SB2019120313
SB2019120314
and 20 more
#VU23375 - Memory corruption
CVE-2019-17005
CWE-119 High
No
No
1:68.4.1+build1-0ubuntu0.18.04.1, 1:68.4.1+build1-0ubuntu0.19.10.1, 1:68.7.0+build1-0ubuntu0.16.04.2 03.12.2019 SB2019120312
SB2019120313
SB2019120314
and 20 more
#VU23374 - Use After Free
CVE-2019-17010
CWE-416 High
No
No
1:68.4.1+build1-0ubuntu0.18.04.1, 1:68.4.1+build1-0ubuntu0.19.10.1, 1:68.7.0+build1-0ubuntu0.16.04.2 03.12.2019 SB2019120312
SB2019120313
SB2019120314
and 20 more
#VU23370 - Use After Free
CVE-2019-17008
CWE-416 High
No
No
1:68.4.1+build1-0ubuntu0.18.04.1, 1:68.4.1+build1-0ubuntu0.19.10.1, 1:68.7.0+build1-0ubuntu0.16.04.2 03.12.2019 SB2019120312
SB2019120313
SB2019120314
and 20 more
#VU23050 - Out-of-bounds write
CVE-2019-11745
CWE-787 High
No
No
1:68.4.1+build1-0ubuntu0.18.04.1, 1:68.4.1+build1-0ubuntu0.19.10.1, 1:68.7.0+build1-0ubuntu0.16.04.2 28.11.2019 SB2019112801
SB2019112802
SB2019120312
and 29 more
#VU21106 - Exposure of sensitive information to an unauthorized actor
CVE-2019-11739
CWE-200 Low
No
No
1:60.9.0+build1-0ubuntu0.16.04.2, 1:60.9.0+build1-0ubuntu0.18.04.1, 1:60.9.0+build1-0ubuntu0.19.04.1 13.09.2019 SB2019091308
SB2019091608
SB2019091713
and 3 more
#VU20823 - Use After Free
CVE-2019-11752
CWE-416 High
No
No
1:60.9.0+build1-0ubuntu0.16.04.2, 1:60.9.0+build1-0ubuntu0.18.04.1, 1:60.9.0+build1-0ubuntu0.19.04.1 03.09.2019 SB2019090305
SB2019090306
SB2019090307
and 15 more
#VU20819 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-11744
CWE-79 Medium
No
No
1:60.9.0+build1-0ubuntu0.16.04.2, 1:60.9.0+build1-0ubuntu0.18.04.1, 1:60.9.0+build1-0ubuntu0.19.04.1 03.09.2019 SB2019090305
SB2019090306
SB2019090307
and 15 more
#VU20818 - Use After Free
CVE-2019-11746
CWE-416 High
No
No
1:60.9.0+build1-0ubuntu0.16.04.2, 1:60.9.0+build1-0ubuntu0.18.04.1, 1:60.9.0+build1-0ubuntu0.19.04.1 03.09.2019 SB2019090305
SB2019090306
SB2019090307
and 15 more


Showing elements 1 - 20 out of 23