Known vulnerabilities in thunderbird - page 16

Vendor: OpenAnolis
Software: thunderbird
Software CPE: cpe:2.3:o:openanolis:thunderbird:*:*:*:*:*:anolis_os:*:*
Total vulnerabilities: 687
Public exploits: 13
Known exploited (KEV): 5

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting thunderbird thunderbird is affected by 687 known vulnerabilities: 5 critical, 321 high, 224 medium, 137 low Critical High Medium Low

Vulnerabilities (687)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU107465 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2025-3523
CWE-451 Low
No
No
128.9.0-2.0.1 15.04.2025 SB2025041536
SB2025041555
SB2025042487
and 13 more
#VU107464 - Exposure of sensitive information to an unauthorized actor
CVE-2025-2830
CWE-200 Low
No
No
128.9.0-2.0.1 15.04.2025 SB2025041536
SB2025041555
SB2025042487
and 13 more
#VU107463 - Exposure of sensitive information to an unauthorized actor
CVE-2025-3522
CWE-200 Medium
No
No
128.9.0-2.0.1 15.04.2025 SB2025041536
SB2025041555
SB2025042487
and 13 more
#VU106360 - Memory corruption
CVE-2025-3030
CWE-119 High
No
No
128.9.0-2.0.1 01.04.2025 SB2025040129
SB2025040130
SB2025040131
and 40 more
#VU106359 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2025-3029
CWE-451 Medium
No
No
128.9.0-2.0.1 01.04.2025 SB2025040129
SB2025040130
SB2025040131
and 40 more
#VU106358 - Use After Free
CVE-2025-3028
CWE-416 High
No
No
128.9.0-2.0.1 01.04.2025 SB2025040129
SB2025040130
SB2025040131
and 40 more
#VU100959 - Memory corruption
CVE-2024-11699
CWE-119 High
No
No
128.5.0-1.0.1 26.11.2024 SB2024112669
SB2024112670
SB2024112671
and 40 more
#VU100957 - Data Handling
CVE-2024-11697
CWE-19 Low
No
No
128.5.0-1.0.1 26.11.2024 SB2024112669
SB2024112670
SB2024112671
and 43 more
#VU100956 - Error Handling
CVE-2024-11696
CWE-388 Medium
No
No
128.5.0-1.0.1 26.11.2024 SB2024112669
SB2024112670
SB2024112671
and 40 more
#VU100955 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2024-11695
CWE-451 Medium
No
No
128.5.0-1.0.1 26.11.2024 SB2024112669
SB2024112670
SB2024112671
and 40 more
#VU100953 - Insufficient UI Warning of Dangerous Operations
CVE-2024-11692
CWE-357 Low
No
No
128.5.0-1.0.1 26.11.2024 SB2024112669
SB2024112670
SB2024112671
and 43 more
#VU100952 - Security Features
CVE-2024-11694
CWE-254 Medium
No
No
128.5.0-1.0.1 26.11.2024 SB2024112669
SB2024112670
SB2024112671
and 41 more
#VU100447 - Exposure of sensitive information to an unauthorized actor
CVE-2024-11159
CWE-200 Low
No
No
128.5.0-1.0.1 13.11.2024 SB2024111333
SB2024111603
SB2024112544
and 12 more
#VU99487 - Resource Management Errors
CVE-2024-10464
CWE-399 Low
No
No
128.4.0-1.0.1 29.10.2024 SB2024102965
SB2024102966
SB2024102967
and 42 more
#VU99486 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2024-10462
CWE-451 Medium
No
No
128.4.0-1.0.1 29.10.2024 SB2024102965
SB2024102966
SB2024102967
and 42 more
#VU99485 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-10461
CWE-79 Medium
No
No
128.4.0-1.0.1 29.10.2024 SB2024102965
SB2024102966
SB2024102967
and 42 more
#VU99484 - Insufficient UI Warning of Dangerous Operations
CVE-2024-10460
CWE-357 Low
No
No
128.4.0-1.0.1 29.10.2024 SB2024102965
SB2024102966
SB2024102967
and 42 more
#VU99482 - Exposure of sensitive information to an unauthorized actor
CVE-2024-10463
CWE-200 Low
No
No
128.4.0-1.0.1 29.10.2024 SB2024102965
SB2024102966
SB2024102967
and 42 more
#VU99481 - Use After Free
CVE-2024-10459
CWE-416 High
No
No
128.4.0-1.0.1 29.10.2024 SB2024102965
SB2024102966
SB2024102967
and 42 more
#VU99480 - Permissions, Privileges, and Access Controls
CVE-2024-10458
CWE-264 Medium
No
No
128.4.0-1.0.1 29.10.2024 SB2024102965
SB2024102966
SB2024102967
and 42 more


Showing elements 301 - 320 out of 687