Known vulnerabilities in Mozilla Thunderbird 128.1.1 - page 14

Vendor: Mozilla
Version: 128.1.1
Software CPE: cpe:2.3:a:mozilla:mozilla_thunderbird:*:*:*:*:*:*:*:*
Total vulnerabilities: 363
Public exploits: 4
Known exploited (KEV): 1
Highest CVSSv4 Score: 8.8

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Mozilla Thunderbird version 128.1.1 Mozilla Thunderbird 128.1.1 is affected by 363 vulnerabilities: 1 critical, 193 high, 108 medium, 61 low Critical High Medium Low

Vulnerabilities (363)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU111889 - Protection Mechanism Failure
CVE-2025-6430
CWE-693 Medium
No
No
128.12, 140.0 24.06.2025 SB2025062449
SB2025062452
SB2025062453
and 30 more
#VU111888 - Improper input validation
CVE-2025-6429
CWE-20 Low
No
No
128.12, 140.0 24.06.2025 SB2025062449
SB2025062452
SB2025062453
and 30 more
#VU111887 - Insufficient UI Warning of Dangerous Operations
CVE-2025-6426
CWE-357 High
No
No
128.12, 140.0 24.06.2025 SB2025062449
SB2025062452
SB2025062453
and 7 more
#VU111886 - Exposure of sensitive information to an unauthorized actor
CVE-2025-6425
CWE-200 Medium
No
No
128.12, 140.0 24.06.2025 SB2025062449
SB2025062452
SB2025062453
and 30 more
#VU111885 - Use After Free
CVE-2025-6424
CWE-416 High
No
No
128.12, 140.0 24.06.2025 SB2025062449
SB2025062452
SB2025062453
and 30 more
#VU109878 - Memory corruption
CVE-2025-5269
CWE-119 High
No
No
128.11.0 27.05.2025 SB2025052751
SB2025052772
SB2025052843
and 22 more
#VU109877 - Memory corruption
CVE-2025-5268
CWE-119 High
No
No
128.11.0, 139.0 27.05.2025 SB2025052751
SB2025052771
SB2025052772
and 23 more
#VU109876 - Insufficient UI Warning of Dangerous Operations
CVE-2025-5267
CWE-357 Low
No
No
128.11.0, 139.0 27.05.2025 SB2025052751
SB2025052771
SB2025052772
and 23 more
#VU109875 - Exposure of sensitive information to an unauthorized actor
CVE-2025-5266
CWE-200 Medium
No
No
128.11.0, 139.0 27.05.2025 SB2025052751
SB2025052771
SB2025052772
and 23 more
#VU109859 - Improper input validation
CVE-2025-5265
CWE-20 Medium
No
No
128.11.0, 139.0 27.05.2025 SB2025052751
SB2025052771
SB2025052772
and 5 more
#VU109858 - Improper input validation
CVE-2025-5264
CWE-20 Medium
No
No
128.11.0, 139.0 27.05.2025 SB2025052751
SB2025052771
SB2025052772
and 23 more
#VU109857 - Error Handling
CVE-2025-5263
CWE-388 Medium
No
No
128.11.0, 139.0 27.05.2025 SB2025052751
SB2025052771
SB2025052772
and 23 more
#VU109855 - Double Free
CVE-2025-5262
CWE-415 High
No
No
128.11.0, 139.0 27.05.2025 SB2025052751
SB2025052771
SB2025052772
and 4 more
#VU109401 - Out-of-bounds write
CVE-2025-4921
CWE-787 High
No
No
128.10.2, 138.0.2 18.05.2025 SB2025051812
SB2025051813
SB2025051908
and 32 more
#VU109400 - Out-of-bounds write
CVE-2025-4920
CWE-787 High
No
No
128.10.2, 138.0.2 18.05.2025 SB2025051812
SB2025051813
SB2025051908
and 32 more
#VU109193 - Exposure of sensitive information to an unauthorized actor
CVE-2025-3932
CWE-200 Low
No
No
128.10.1, 138.0.1 14.05.2025 SB2025051464
SB2025051675
SB2025051707
and 12 more
#VU109192 - Improper input validation
CVE-2025-3909
CWE-20 High
No
No
128.10.1, 138.0.1 14.05.2025 SB2025051464
SB2025051675
SB2025051707
and 12 more
#VU109191 - Improper input validation
CVE-2025-3877
CWE-20 Medium
No
No
128.10.1, 138.0.1 14.05.2025 SB2025051464
SB2025051675
SB2025051707
and 10 more
#VU109190 - Improper input validation
CVE-2025-3875
CWE-20 Medium
No
No
128.10.1, 138.0.1 14.05.2025 SB2025051464
SB2025051675
SB2025051707
and 12 more
#VU108044 - Improper Locking
CVE-2025-2817
CWE-667 Low
No
No
128.10, 138.0 29.04.2025 SB2025042927
SB2025042928
SB2025042929
and 26 more


Showing elements 261 - 280 out of 363