Known vulnerabilities in thunderbird (Debian package) - page 9

Vendor: Debian
Software CPE: cpe:2.3:o:debian:thunderbird_debian_package:*:*:*:*:*:debian_linux:*:*
Total vulnerabilities: 728
Public exploits: 24
Known exploited (KEV): 9
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting thunderbird (Debian package) thunderbird (Debian package) is affected by 728 known vulnerabilities: 8 critical, 347 high, 232 medium, 141 low Critical High Medium Low

Vulnerabilities (728)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU123195 - Memory corruption
CVE-2026-2793
CWE-119 High
No
No
1:140.8.0esr-1~deb12u1, 1:140.8.0esr-1~deb13u1 24.02.2026 SB2026022446
SB2026022526
SB2026022527
and 34 more
#VU122117 - Exposure of sensitive information to an unauthorized actor
CVE-2026-0818
CWE-200 Medium
No
No
1:140.7.1esr-1~deb12u1, 1:140.7.1esr-1~deb13u1 29.01.2026 SB2026012911
SB2026020339
SB2026020408
and 3 more
#VU121218 - Memory corruption
CVE-2026-0891
CWE-119 High
No
No
1:140.7.0esr-1~deb12u1, 1:140.7.0esr-1~deb13u1 13.01.2026 SB2026011359
SB20260114138
SB2026011516
and 36 more
#VU121217 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2026-0890
CWE-451 Low
No
No
1:140.7.0esr-1~deb12u1, 1:140.7.0esr-1~deb13u1 13.01.2026 SB2026011359
SB20260114138
SB2026011516
and 36 more
#VU121216 - Improper Restriction of Rendered UI Layers or Frames
CVE-2026-0887
CWE-1021 Medium
No
No
1:140.7.0esr-1~deb12u1, 1:140.7.0esr-1~deb13u1 13.01.2026 SB2026011359
SB20260114138
SB2026011516
and 36 more
#VU121215 - Use After Free
CVE-2026-0885
CWE-416 Low
No
No
1:140.7.0esr-1~deb12u1, 1:140.7.0esr-1~deb13u1 13.01.2026 SB2026011359
SB20260114138
SB2026011516
and 36 more
#VU121214 - Use After Free
CVE-2026-0884
CWE-416 Low
No
No
1:140.7.0esr-1~deb12u1, 1:140.7.0esr-1~deb13u1 13.01.2026 SB2026011359
SB20260114138
SB2026011516
and 36 more
#VU121213 - Exposure of sensitive information to an unauthorized actor
CVE-2026-0883
CWE-200 Medium
No
No
1:140.7.0esr-1~deb12u1, 1:140.7.0esr-1~deb13u1 13.01.2026 SB2026011359
SB20260114138
SB2026011516
and 36 more
#VU121212 - Memory corruption
CVE-2026-0878
CWE-119 High
No
No
1:140.7.0esr-1~deb12u1, 1:140.7.0esr-1~deb13u1 13.01.2026 SB2026011359
SB20260114138
SB2026011516
and 36 more
#VU121211 - Memory corruption
CVE-2026-0886
CWE-119 High
No
No
1:140.7.0esr-1~deb12u1, 1:140.7.0esr-1~deb13u1 13.01.2026 SB2026011359
SB20260114138
SB2026011516
and 36 more
#VU121210 - Integer overflow
CVE-2026-0880
CWE-190 High
No
No
1:140.7.0esr-1~deb12u1, 1:140.7.0esr-1~deb13u1 13.01.2026 SB2026011359
SB20260114138
SB2026011516
and 36 more
#VU121209 - Use After Free
CVE-2026-0882
CWE-416 High
No
No
1:140.7.0esr-1~deb12u1, 1:140.7.0esr-1~deb13u1 13.01.2026 SB2026011359
SB20260114138
SB2026011516
and 36 more
#VU121208 - Memory corruption
CVE-2026-0879
CWE-119 High
No
No
1:140.7.0esr-1~deb12u1, 1:140.7.0esr-1~deb13u1 13.01.2026 SB2026011359
SB20260114138
SB2026011516
and 36 more
#VU121207 - Protection Mechanism Failure
CVE-2026-0877
CWE-693 High
No
No
1:140.7.0esr-1~deb12u1, 1:140.7.0esr-1~deb13u1 13.01.2026 SB2026011359
SB20260114138
SB2026011516
and 36 more
#VU119420 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2025-14327
CWE-451 Medium
No
No
1:140.7.0esr-1~deb12u1, 1:140.7.0esr-1~deb13u1 09.12.2025 SB2025120939
SB20251210204
SB20260114138
and 36 more
#VU119414 - Improper input validation
CVE-2025-14325
CWE-20 High
No
No
1:140.6.0esr-1~deb12u1, 1:140.6.0esr-1~deb13u1 09.12.2025 SB2025120939
SB20251210189
SB20251210190
and 41 more
#VU119413 - Use After Free
CVE-2025-14321
CWE-416 High
Available
No
1:140.6.0esr-1~deb12u1, 1:140.6.0esr-1~deb13u1 09.12.2025 SB2025120939
SB20251210189
SB20251210190
and 41 more
#VU119411 - Improper input validation
CVE-2025-14324
CWE-20 High
No
No
1:140.6.0esr-1~deb12u1, 1:140.6.0esr-1~deb13u1 09.12.2025 SB2025120939
SB20251210189
SB20251210190
and 41 more
#VU119410 - Improper Privilege Management
CVE-2025-14323
CWE-269 Medium
No
No
1:140.6.0esr-1~deb12u1, 1:140.6.0esr-1~deb13u1 09.12.2025 SB2025120939
SB20251210189
SB20251210190
and 41 more
#VU119409 - Memory corruption
CVE-2025-14322
CWE-119 High
No
No
1:140.6.0esr-1~deb12u1, 1:140.6.0esr-1~deb13u1 09.12.2025 SB2025120939
SB20251210189
SB20251210190
and 41 more


Showing elements 161 - 180 out of 728