Known vulnerabilities in thunderbird - page 31
Vendor:
OpenAnolis
Software:
thunderbird
Software CPE:
cpe:2.3:o:openanolis:thunderbird:*:*:*:*:*:anolis_os:*:*
Website:
https://openanolis.cn/
Total vulnerabilities:
687
Public exploits:
13
Known exploited (KEV):
5
Breakdown by Severity Chart
140.14.0-1.0.1
140.13.0-1.0.1
140.12.0-1.0.1
128.14.0-3.0.1
128.13.0-3.0.1
128.12.0-1.0.1
128.11.0-1.0.1
128.10.0-1.0.1
128.9.0-2.0.1
128.5.0-1.0.1
128.4.0-1.0.1
128.3.0-1.0.1
115.5.0-1.0.1
102.3.0-3.0.2
102.5.0-2.0.1
102.3.0-3.0.1
91.3.0-2.0.1
128.8.0-2.0.1
128.7.0-1.0.1
128.6.0-3.0.1
128.3.1-1.0.1
128.2.0-1.0.1
115.14.0-1.0.1
115.13.0-3.0.1
115.12.1-1.0.1
115.10.0-2.0.1
115.9.0-1.0.1
115.8.0-1.0.1
115.7.0-1.0.1
115.6.0-1.0.1
115.4.1-1.0.1
115.3.1-1.0.1
102.15.1-1.0.1
102.15.0-1.0.1
102.14.0-3.0.1
102.14.0-1.0.1
102.13.0-2.0.1
102.12.0-1.0.1
102.11.0-1.0.1
102.10.0-2.0.1
102.9.0-1.0.1
102.8.0-2.0.1
102.7.1-2.0.1
102.7.1-1.0.1
102.6.0-2.0.1
102.4.0-1.0.1
102.3.0-4.0.1
91.13.0-1.0.1
91.12.0-1.0.1
91.11.0-2.0.1
91.10.0-1.0.1
91.9.1-1.0.1
91.9.0-3.0.1
91.8.0-1.0.2
91.8.0-1.0.1
91.7.0-2.0.1
91.6.0-1.0.1
91.5.0-1.0.1
91.4.0-2.0.1
78.13.0-1.0.1
78.12.0-2.0.1
78.11.0-1.0.1
78.10.0-1.0.1
Vulnerabilities (687)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU62763 - Memory corruption CVE-2022-29917 |
CWE-119 | High | 91.9.0-3.0.1 | 03.05.2022 |
SB2022050314 SB2022050425 SB2022050426 and 30 more |
||
| #VU62758 - Exposure of sensitive information to an unauthorized actor CVE-2022-29916 |
CWE-200 | Low | 91.9.0-3.0.1 | 03.05.2022 |
SB2022050314 SB2022050425 SB2022050426 and 30 more |
||
| #VU61943 - Security Features CVE-2022-1197 |
CWE-254 | Medium | 91.8.0-1.0.1, 91.8.0-1.0.2 | 06.04.2022 |
SB2022040628 SB2022040629 SB2022041121 and 10 more |
||
| #VU61895 - Resource exhaustion CVE-2022-24713 |
CWE-400 | Medium | 91.8.0-1.0.1, 91.8.0-1.0.2 | 05.04.2022 |
SB2022040527 SB2022040526 SB2022040529 and 34 more |
||
| #VU61894 - Use After Free CVE-2022-1196 |
CWE-416 | High | 91.8.0-1.0.1, 91.8.0-1.0.2 | 05.04.2022 |
SB2022040526 SB2022040529 SB2022040628 and 23 more |
||
| #VU61892 - Memory corruption CVE-2022-28289 |
CWE-119 | High | 91.8.0-1.0.1, 91.8.0-1.0.2 | 05.04.2022 |
SB2022040526 SB2022040529 SB2022040628 and 24 more |
||
| #VU61890 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing) CVE-2022-28286 |
CWE-451 | Medium | 91.8.0-1.0.1, 91.8.0-1.0.2 | 05.04.2022 |
SB2022040526 SB2022040628 SB2022040629 and 23 more |
||
| #VU61889 - Resource Management Errors CVE-2022-28285 |
CWE-399 | Low | 91.8.0-1.0.1, 91.8.0-1.0.2 | 05.04.2022 |
SB2022040526 SB2022040529 SB2022040628 and 26 more |
||
| #VU61886 - Use After Free CVE-2022-28282 |
CWE-416 | High | 91.8.0-1.0.1, 91.8.0-1.0.2 | 05.04.2022 |
SB2022040526 SB2022040529 SB2022040628 and 24 more |
||
| #VU61885 - Out-of-bounds write CVE-2022-28281 |
CWE-787 | High | 91.8.0-1.0.1, 91.8.0-1.0.2 | 05.04.2022 |
SB2022040526 SB2022040529 SB2022040628 and 24 more |
||
| #VU61884 - Use After Free CVE-2022-1097 |
CWE-416 | High | 91.8.0-1.0.1, 91.8.0-1.0.2 | 05.04.2022 |
SB2022040526 SB2022040529 SB2022040628 and 28 more |
||
| #VU61109 - Improper Access Control CVE-2022-26386 |
CWE-284 | Low | 91.7.0-2.0.1 | 08.03.2022 |
SB2022030807 SB2022030914 SB2022031015 and 24 more |
||
| #VU61105 - Use After Free CVE-2022-26381 |
CWE-416 | High | 91.7.0-2.0.1 | 08.03.2022 |
SB2022030807 SB2022030914 SB2022031015 and 27 more |
||
| #VU61104 - Time-of-check Time-of-use (TOCTOU) Race Condition CVE-2022-26387 |
CWE-367 | Medium | 91.7.0-2.0.1 | 08.03.2022 |
SB2022030807 SB2022030914 SB2022031015 and 27 more |
||
| #VU61103 - Permissions, Privileges, and Access Controls CVE-2022-26384 |
CWE-264 | Medium | 91.7.0-2.0.1 | 08.03.2022 |
SB2022030807 SB2022030914 SB2022031015 and 27 more |
||
| #VU61102 - Insufficient UI Warning of Dangerous Operations CVE-2022-26383 |
CWE-357 | Low | 91.7.0-2.0.1 | 08.03.2022 |
SB2022030807 SB2022030914 SB2022031015 and 27 more |
||
| #VU60739 - Integer overflow CVE-2022-25315 |
CWE-190 | High | 91.7.0-2.0.1 | 21.02.2022 |
SB2022022109 SB2022022113 SB2022022411 and 99 more |
||
| #VU60736 - Improper Control of Generation of Code ('Code Injection') CVE-2022-25235 |
CWE-94 | High | 91.7.0-2.0.1 | 21.02.2022 |
SB2022022109 SB2022022113 SB2022022411 and 106 more |
||
| #VU60733 - Improper input validation CVE-2022-25236 |
CWE-20 | Medium | 91.7.0-2.0.1 | 21.02.2022 |
SB2022022109 SB2022022113 SB2022022411 and 109 more |
||
| #VU60628 - Out-of-bounds write CVE-2022-0566 |
CWE-787 | High | 91.7.0-2.0.1 | 15.02.2022 |
SB2022021517 SB2022021814 SB2022022503 and 12 more |
Showing elements 601 - 620 out of 687