Known vulnerabilities in Mozilla Thunderbird - page 21

Vendor: Mozilla
Software CPE: cpe:2.3:a:mozilla:mozilla_thunderbird:*:*:*:*:*:*:*:*
Total vulnerabilities: 1221
Public exploits: 32
Known exploited (KEV): 12
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Mozilla Thunderbird Mozilla Thunderbird is affected by 1221 known vulnerabilities: 10 critical, 549 high, 341 medium, 321 low Critical High Medium Low

Vulnerabilities (1221)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU109881 - Memory corruption
CVE-2025-5272
CWE-119 High
No
No
139.0 27.05.2025 SB2025052751
SB2025052771
SB2026020339
#VU109880 - Protection Mechanism Failure
CVE-2025-5271
CWE-693 Low
No
No
139.0 27.05.2025 SB2025052751
SB2025052771
SB2026020339
#VU109879 - Cleartext Transmission of Sensitive Information
CVE-2025-5270
CWE-319 Low
No
No
139.0 27.05.2025 SB2025052751
SB2025052771
SB2026020339
#VU109877 - Memory corruption
CVE-2025-5268
CWE-119 High
No
No
128.11.0, 139.0 27.05.2025 SB2025052751
SB2025052771
SB2025052772
and 23 more
#VU109876 - Insufficient UI Warning of Dangerous Operations
CVE-2025-5267
CWE-357 Low
No
No
128.11.0, 139.0 27.05.2025 SB2025052751
SB2025052771
SB2025052772
and 23 more
#VU109401 - Out-of-bounds write
CVE-2025-4921
CWE-787 High
No
No
128.10.2, 138.0.2 18.05.2025 SB2025051812
SB2025051813
SB2025051908
and 32 more
#VU109400 - Out-of-bounds write
CVE-2025-4920
CWE-787 High
No
No
128.10.2, 138.0.2 18.05.2025 SB2025051812
SB2025051813
SB2025051908
and 32 more
#VU109193 - Exposure of sensitive information to an unauthorized actor
CVE-2025-3932
CWE-200 Low
No
No
128.10.1, 138.0.1 14.05.2025 SB2025051464
SB2025051675
SB2025051707
and 12 more
#VU109192 - Improper input validation
CVE-2025-3909
CWE-20 High
No
No
128.10.1, 138.0.1 14.05.2025 SB2025051464
SB2025051675
SB2025051707
and 12 more
#VU109191 - Improper input validation
CVE-2025-3877
CWE-20 Medium
No
No
128.10.1, 138.0.1 14.05.2025 SB2025051464
SB2025051675
SB2025051707
and 10 more
#VU109190 - Improper input validation
CVE-2025-3875
CWE-20 Medium
No
No
128.10.1, 138.0.1 14.05.2025 SB2025051464
SB2025051675
SB2025051707
and 12 more
#VU108053 - Cross-Site Request Forgery (CSRF)
CVE-2025-4088
CWE-352 Medium
No
No
138.0 29.04.2025 SB2025042927
SB2025042928
SB2026020339
#VU108052 - Improper input validation
CVE-2025-4086
CWE-20 Low
No
No
138.0 29.04.2025 SB2025042927
SB2025042928
#VU108051 - Exposure of sensitive information to an unauthorized actor
CVE-2025-4085
CWE-200 Medium
No
No
138.0 29.04.2025 SB2025042927
SB2025042928
SB2026020339
#VU108050 - Memory corruption
CVE-2025-4093
CWE-119 High
No
No
128.10 29.04.2025 SB2025042927
SB2025042929
SB2025043001
and 26 more
#VU108048 - Out-of-bounds read
CVE-2025-4087
CWE-125 High
No
No
128.10, 138.0 29.04.2025 SB2025042927
SB2025042928
SB2025042929
and 27 more
#VU108047 - Improper input validation
CVE-2025-4084
CWE-20 Medium
No
No
128.10 29.04.2025 SB2025042927
SB2025042929
SB2025043001
and 8 more
#VU108046 - Protection Mechanism Failure
CVE-2025-4083
CWE-693 High
No
No
128.10, 138.0 29.04.2025 SB2025042927
SB2025042928
SB2025042929
and 27 more
#VU108045 - Memory corruption
CVE-2025-4082
CWE-119 High
No
No
128.10, 138.0 29.04.2025 SB2025042927
SB2025042928
SB2025042929
and 5 more
#VU108044 - Improper Locking
CVE-2025-2817
CWE-667 Low
No
No
128.10, 138.0 29.04.2025 SB2025042927
SB2025042928
SB2025042929
and 26 more


Showing elements 401 - 420 out of 1221