Known vulnerabilities in thunderbird (Ubuntu package) - page 22

Software CPE: cpe:2.3:o:canonical:thunderbird_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Total vulnerabilities: 606
Public exploits: 23
Known exploited (KEV): 7
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting thunderbird (Ubuntu package) thunderbird (Ubuntu package) is affected by 606 known vulnerabilities: 6 critical, 267 high, 184 medium, 149 low Critical High Medium Low

Vulnerabilities (606)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU61104 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2022-26387
CWE-367 Medium
No
No
1:91.7.0+build2-0ubuntu0.18.04.1, 1:91.7.0+build2-0ubuntu0.20.04.1, 1:91.7.0+build2-0ubuntu0.21.10.1 08.03.2022 SB2022030807
SB2022030914
SB2022031015
and 27 more
#VU59373 - Security Features
CVE-2021-4140
CWE-254 High
No
No
1:91.5.0+build1-0ubuntu0.18.04.1, 1:91.5.0+build1-0ubuntu0.20.04.1, 1:91.5.0+build1-0ubuntu0.21.10.1 11.01.2022 SB2022011114
SB2022011115
SB2022011726
and 28 more
#VU59372 - Use After Free
CVE-2022-22737
CWE-416 High
No
No
1:91.5.0+build1-0ubuntu0.18.04.1, 1:91.5.0+build1-0ubuntu0.20.04.1, 1:91.5.0+build1-0ubuntu0.21.10.1 11.01.2022 SB2022011114
SB2022011115
SB2022011726
and 27 more
#VU58617 - Memory corruption
CVE-2021-4129
CWE-119 High
No
No
1:91.5.0+build1-0ubuntu0.18.04.1, 1:91.5.0+build1-0ubuntu0.20.04.1, 1:91.5.0+build1-0ubuntu0.21.10.1 07.12.2021 SB2021120711
SB2021120712
SB2022022210
and 3 more
#VU58615 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-43545
CWE-835 Low
No
No
1:91.5.0+build1-0ubuntu0.18.04.1, 1:91.5.0+build1-0ubuntu0.20.04.1, 1:91.5.0+build1-0ubuntu0.21.10.1 07.12.2021 SB2021120711
SB2021120712
SB2021120818
and 29 more
#VU58613 - Security Features
CVE-2021-43543
CWE-254 Medium
No
No
1:91.5.0+build1-0ubuntu0.18.04.1, 1:91.5.0+build1-0ubuntu0.20.04.1, 1:91.5.0+build1-0ubuntu0.21.10.1 07.12.2021 SB2021120711
SB2021120712
SB2021120818
and 29 more
#VU58612 - Exposure of sensitive information to an unauthorized actor
CVE-2021-43542
CWE-200 Low
No
No
1:91.5.0+build1-0ubuntu0.18.04.1, 1:91.5.0+build1-0ubuntu0.20.04.1, 1:91.5.0+build1-0ubuntu0.21.10.1 07.12.2021 SB2021120711
SB2021120712
SB2021120818
and 29 more
#VU58611 - Improper input validation
CVE-2021-43541
CWE-20 Low
No
No
1:91.5.0+build1-0ubuntu0.18.04.1, 1:91.5.0+build1-0ubuntu0.20.04.1, 1:91.5.0+build1-0ubuntu0.21.10.1 07.12.2021 SB2021120711
SB2021120712
SB2021120818
and 29 more
#VU58608 - Use After Free
CVE-2021-43539
CWE-416 High
No
No
1:91.5.0+build1-0ubuntu0.18.04.1, 1:91.5.0+build1-0ubuntu0.20.04.1, 1:91.5.0+build1-0ubuntu0.21.10.1 07.12.2021 SB2021120711
SB2021120712
SB2021120818
and 30 more
#VU58607 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2021-43538
CWE-451 Medium
No
No
1:91.5.0+build1-0ubuntu0.18.04.1, 1:91.5.0+build1-0ubuntu0.20.04.1, 1:91.5.0+build1-0ubuntu0.21.10.1 07.12.2021 SB2021120711
SB2021120712
SB2021120818
and 29 more
#VU58586 - Type conversion
CVE-2021-43537
CWE-704 High
No
No
1:91.5.0+build1-0ubuntu0.18.04.1, 1:91.5.0+build1-0ubuntu0.20.04.1, 1:91.5.0+build1-0ubuntu0.21.10.1 07.12.2021 SB2021120711
SB2021120712
SB2021120818
and 29 more
#VU58585 - Exposure of sensitive information to an unauthorized actor
CVE-2021-43536
CWE-200 Low
No
No
1:91.5.0+build1-0ubuntu0.18.04.1, 1:91.5.0+build1-0ubuntu0.20.04.1, 1:91.5.0+build1-0ubuntu0.21.10.1 07.12.2021 SB2021120711
SB2021120712
SB2021120818
and 29 more
#VU57889 - Use After Free
CVE-2021-43535
CWE-416 High
No
No
1:91.5.0+build1-0ubuntu0.18.04.1, 1:91.5.0+build1-0ubuntu0.20.04.1 02.11.2021 SB2021110228
SB2021122010
SB2022010315
and 1 more
#VU57888 - Memory corruption
CVE-2021-43534
CWE-119 High
No
No
1:91.5.0+build1-0ubuntu0.18.04.1, 1:91.5.0+build1-0ubuntu0.20.04.1 02.11.2021 SB2021110228
SB2021122010
SB2022010315
and 1 more
#VU57882 - Improper Restriction of Rendered UI Layers or Frames
CVE-2021-38508
CWE-1021 Low
No
No
1:91.5.0+build1-0ubuntu0.18.04.1, 1:91.5.0+build1-0ubuntu0.20.04.1 02.11.2021 SB2021110228
SB2021110311
SB2021110501
and 24 more
#VU56376 - Memory corruption
CVE-2021-38495
CWE-119 High
No
No
1:91.5.0+build1-0ubuntu0.18.04.1, 1:91.5.0+build1-0ubuntu0.20.04.1 07.09.2021 SB2021090711
SB2021090801
SB2021100414
and 11 more
#VU55935 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2021-29991
CWE-113 Medium
No
No
1:91.5.0+build1-0ubuntu0.18.04.1, 1:91.5.0+build1-0ubuntu0.20.04.1 18.08.2021 SB2021081805
SB2021100414
SB2021092228
and 8 more
#VU55687 - Type confusion
CVE-2021-29982
CWE-843 Low
No
No
1:91.5.0+build1-0ubuntu0.18.04.1, 1:91.5.0+build1-0ubuntu0.20.04.1 10.08.2021 SB2021081008
SB2021081102
SB2021100414
and 10 more
#VU55686 - Insufficient UI Warning of Dangerous Operations
CVE-2021-29987
CWE-357 Low
No
No
1:91.5.0+build1-0ubuntu0.18.04.1, 1:91.5.0+build1-0ubuntu0.20.04.1 10.08.2021 SB2021081008
SB2021081102
SB2021100414
and 10 more
#VU55679 - Improper input validation
CVE-2021-29981
CWE-20 High
No
No
1:91.5.0+build1-0ubuntu0.18.04.1, 1:91.5.0+build1-0ubuntu0.20.04.1 10.08.2021 SB2021081008
SB2021081102
SB2021100414
and 10 more


Showing elements 421 - 440 out of 606