Known vulnerabilities in thunderbird (Ubuntu package) 1:68.4.2+build2-0ubuntu1

Version: 1:68.4.2+build2-0ubuntu1
Software CPE: cpe:2.3:o:canonical:thunderbird_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Total vulnerabilities: 44
Public exploits: 2
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting thunderbird (Ubuntu package) version 1:68.4.2+build2-0ubuntu1 thunderbird (Ubuntu package) 1:68.4.2+build2-0ubuntu1 is affected by 44 vulnerabilities: 3 critical, 20 high, 10 medium, 11 low Critical High Medium Low

Vulnerabilities (44)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU27572 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2020-12397
CWE-451 Low
No
No
1:68.8.0+build2-0ubuntu0.16.04.2, 1:68.8.0+build2-0ubuntu0.18.04.2, 1:68.8.0+build2-0ubuntu0.19.10.2, 1:68.8.0+build2-0ubuntu0.20.04.2 06.05.2020 SB2020050618
SB2020050901
SB2020051105
and 11 more
#VU27538 - Memory corruption
CVE-2020-12395
CWE-119 High
No
No
1:68.8.0+build2-0ubuntu0.16.04.2, 1:68.8.0+build2-0ubuntu0.18.04.2, 1:68.8.0+build2-0ubuntu0.19.10.2, 1:68.8.0+build2-0ubuntu0.20.04.2 05.05.2020 SB2020050511
SB2020050518
SB2020050606
and 29 more
#VU27535 - Improper input validation
CVE-2020-12392
CWE-20 Low
No
No
1:68.8.0+build2-0ubuntu0.16.04.2, 1:68.8.0+build2-0ubuntu0.18.04.2, 1:68.8.0+build2-0ubuntu0.19.10.2, 1:68.8.0+build2-0ubuntu0.20.04.2 05.05.2020 SB2020050511
SB2020050518
SB2020050606
and 29 more
#VU27532 - Memory corruption
CVE-2020-6831
CWE-119 High
No
No
1:68.8.0+build2-0ubuntu0.16.04.2, 1:68.8.0+build2-0ubuntu0.18.04.2, 1:68.8.0+build2-0ubuntu0.19.10.2, 1:68.8.0+build2-0ubuntu0.20.04.2 05.05.2020 SB2020050511
SB2020050517
SB2020050518
and 37 more
#VU27529 - Use After Free
CVE-2020-12387
CWE-416 High
No
No
1:68.8.0+build2-0ubuntu0.16.04.2, 1:68.8.0+build2-0ubuntu0.18.04.2, 1:68.8.0+build2-0ubuntu0.19.10.2, 1:68.8.0+build2-0ubuntu0.20.04.2 05.05.2020 SB2020050511
SB2020050518
SB2020050606
and 29 more
#VU25122 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-6798
CWE-94 Medium
No
No
1:68.7.0+build1-0ubuntu0.16.04.2 11.02.2020 SB2020021108
SB2020021109
SB2020021110
and 26 more
#VU24062 - Memory corruption
CVE-2019-17024
CWE-119 High
No
No
1:68.4.1+build1-0ubuntu0.18.04.1, 1:68.4.1+build1-0ubuntu0.19.10.1, 1:68.7.0+build1-0ubuntu0.16.04.2 07.01.2020 SB2020010708
SB2020010807
SB2020010712
and 21 more
#VU24060 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-17022
CWE-79 Medium
No
No
1:68.4.1+build1-0ubuntu0.18.04.1, 1:68.4.1+build1-0ubuntu0.19.10.1, 1:68.7.0+build1-0ubuntu0.16.04.2 07.01.2020 SB2020010708
SB2020010807
SB2020010712
and 21 more
#VU24055 - Type confusion
CVE-2019-17017
CWE-843 Medium
No
No
1:68.4.1+build1-0ubuntu0.18.04.1, 1:68.4.1+build1-0ubuntu0.19.10.1, 1:68.7.0+build1-0ubuntu0.16.04.2 07.01.2020 SB2020010708
SB2020010807
SB2020010712
and 20 more
#VU24054 - Improper Control of Generation of Code ('Code Injection')
CVE-2019-17016
CWE-94 Medium
No
No
1:68.4.1+build1-0ubuntu0.18.04.1, 1:68.4.1+build1-0ubuntu0.19.10.1, 1:68.7.0+build1-0ubuntu0.16.04.2 07.01.2020 SB2020010708
SB2020010807
SB2020010712
and 21 more
#VU23377 - Memory corruption
CVE-2019-17012
CWE-119 High
No
No
1:68.4.1+build1-0ubuntu0.18.04.1, 1:68.4.1+build1-0ubuntu0.19.10.1, 1:68.7.0+build1-0ubuntu0.16.04.2 03.12.2019 SB2019120312
SB2019120313
SB2019120314
and 20 more
#VU23376 - Use After Free
CVE-2019-17011
CWE-416 High
No
No
1:68.4.1+build1-0ubuntu0.18.04.1, 1:68.4.1+build1-0ubuntu0.19.10.1, 1:68.7.0+build1-0ubuntu0.16.04.2 03.12.2019 SB2019120312
SB2019120313
SB2019120314
and 20 more
#VU23375 - Memory corruption
CVE-2019-17005
CWE-119 High
No
No
1:68.4.1+build1-0ubuntu0.18.04.1, 1:68.4.1+build1-0ubuntu0.19.10.1, 1:68.7.0+build1-0ubuntu0.16.04.2 03.12.2019 SB2019120312
SB2019120313
SB2019120314
and 20 more
#VU23374 - Use After Free
CVE-2019-17010
CWE-416 High
No
No
1:68.4.1+build1-0ubuntu0.18.04.1, 1:68.4.1+build1-0ubuntu0.19.10.1, 1:68.7.0+build1-0ubuntu0.16.04.2 03.12.2019 SB2019120312
SB2019120313
SB2019120314
and 20 more
#VU22173 - Memory corruption
CVE-2019-11764
CWE-119 High
No
No
1:68.2.1+build1-0ubuntu0.18.04.1, 1:68.2.1+build1-0ubuntu0.19.10.1, 1:68.2.2+build1-0ubuntu0.18.04.1, 1:68.2.2+build1-0ubuntu0.19.10.1, 1:68.7.0+build1-0ubuntu0.16.04.2 23.10.2019 SB2019102301
SB2019102302
SB2019102304
and 22 more
#VU22168 - Protection Mechanism Failure
CVE-2019-11763
CWE-693 Low
No
No
1:68.2.1+build1-0ubuntu0.18.04.1, 1:68.2.1+build1-0ubuntu0.19.10.1, 1:68.2.2+build1-0ubuntu0.18.04.1, 1:68.2.2+build1-0ubuntu0.19.10.1, 1:68.7.0+build1-0ubuntu0.16.04.2 23.10.2019 SB2019102301
SB2019102302
SB2019102304
and 22 more
#VU22167 - Permissions, Privileges, and Access Controls
CVE-2019-11762
CWE-264 Low
No
No
1:68.2.1+build1-0ubuntu0.18.04.1, 1:68.2.1+build1-0ubuntu0.19.10.1, 1:68.2.2+build1-0ubuntu0.18.04.1, 1:68.2.2+build1-0ubuntu0.19.10.1, 1:68.7.0+build1-0ubuntu0.16.04.2 23.10.2019 SB2019102301
SB2019102302
SB2019102304
and 22 more
#VU22166 - Permissions, Privileges, and Access Controls
CVE-2019-11761
CWE-264 Low
No
No
1:68.2.1+build1-0ubuntu0.18.04.1, 1:68.2.1+build1-0ubuntu0.19.10.1, 1:68.2.2+build1-0ubuntu0.18.04.1, 1:68.2.2+build1-0ubuntu0.19.10.1, 1:68.7.0+build1-0ubuntu0.16.04.2 23.10.2019 SB2019102301
SB2019102302
SB2019102304
and 22 more
#VU22165 - Stack-based buffer overflow
CVE-2019-11760
CWE-121 Medium
No
No
1:68.2.1+build1-0ubuntu0.18.04.1, 1:68.2.1+build1-0ubuntu0.19.10.1, 1:68.2.2+build1-0ubuntu0.18.04.1, 1:68.2.2+build1-0ubuntu0.19.10.1, 1:68.7.0+build1-0ubuntu0.16.04.2 23.10.2019 SB2019102301
SB2019102302
SB2019102304
and 22 more
#VU22164 - Stack-based buffer overflow
CVE-2019-11759
CWE-121 Low
No
No
1:68.2.1+build1-0ubuntu0.18.04.1, 1:68.2.1+build1-0ubuntu0.19.10.1, 1:68.2.2+build1-0ubuntu0.18.04.1, 1:68.2.2+build1-0ubuntu0.19.10.1, 1:68.7.0+build1-0ubuntu0.16.04.2 23.10.2019 SB2019102301
SB2019102302
SB2019102304
and 22 more


Showing elements 1 - 20 out of 44